CVE-2026-59626

In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58780

In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58736

In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response queue due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not neede...

CVE-2026-58722

In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58705

In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57010

In EncodeLastScanBufferElement of datamanager.cc, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57004

In PresenceDecoderV1::DecodeDataElements of presencedecoderv1.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59626

A use after free vulnerability exists in the SendInfo function of UssiController.cpp . This flaw allows for memory corruption via a dangling connection listener pointer . Successful exploitation could lead to remote escalation of privilege without requiring additional execution privileges or user...

CVE-2026-58736

A use after free vulnerability exists in SessionEx.cpp within the NotifySipResponse function. The flaw is caused by a dangling connection pointer in the pending response queue, which can lead to memory corruption . This vulnerability could potentially allow for remote escalation of privilege with...

CVE-2026-58722

A Heap Buffer Overflow exists in the chppProcessDiscoverAllResponse function within system/chre/chpp/clients/discovery.c. This vulnerability is caused by a logic error in the code and could lead to remote escalation of privilege without requiring additional execution privileges or user interactio...

CVE-2026-58705

A vulnerability exists in the handleEvent function of gscan.cpp , where a missing bounds check can lead to an out of bounds write on the heap . This flaw could enable remote escalation of privilege without requiring additional execution privileges or user interaction. No specific remediation step...

CVE-2026-57010

A logic error in the EncodeLastScanBufferElement function within data_manager.cc leads to a possible out-of-bounds write . This vulnerability could enable remote escalation of privilege without requiring additional execution privileges or user interaction. Specific details regarding the affected ...

CVE-2026-57004

A vulnerability exists in the PresenceDecoderV1::DecodeDataElements function within presence_decoder_v1.cc . The root cause is a missing bounds check , which results in a possible out-of-bounds write . This flaw could allow for remote escalation of privilege without requiring additional execution...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...

CVE-2026-58968

In oapvdvlcmetadata of oapvvlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55283

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58968

In oapvdvlcmetadata of oapvvlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115404

In oapvdvlcmetadata of oapvvlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58968

A double free vulnerability exists in the oapvd_vlc_metadata function within oapv_vlc.c in Google Android . This memory corruption issue could lead to remote escalation of privilege without requiring additional execution privileges or user interaction. While specific exploit details are not provi...