CVE-2026-70717

CVE-2026-70717 affects Oracle Autonomous Health Framework's Cluster Health Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2). A low-privileged attacker with physical segment access can compromise the framework with scope-change impact to other products, causing unauthorized dat...

security-advisories

Threat Lance Security Advisories Public security advisory rep...

EUVD-2026-21208

An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific genuine BGP packet in an already established BGP session to reset only that session causing a Denial of Service DoS. An attacker repeatedly...

CVE-2025-68135

EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the TbdController loop, leading to its caller and itself to silently terminates. Thus, this leads to a denial of service as it is responsible of SDP and ISO15118-20 servers...

CVE-2025-68135 EVerest's inadequate exception handling leads to denial of service

EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the TbdController loop, leading to its caller and itself to silently terminates. Thus, this leads to a denial of service as it is responsible of SDP and ISO15118-20 servers...

CVE-2025-68135

EVerest (EV charging software stack) prior to version 2025.10.0 has a vulnerability in the TbdController loop where C++ exceptions are not properly handled, causing the loop and its caller to terminate silently and leading to a denial of service affecting SDP and ISO15118-20 servers. The issue is...

CVE-2025-36894: NULL Pointer Dereference

In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36665

In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36673

In TBD of TBD, there is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36669

In lwis io buffer write of TBD, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-36661

In TBD of TBD, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-15316

Name of the Vulnerable Software and Affected Versions TBD affected versions not specified Description The issue is related to a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to a local bypass of DRM content protection with no additional execution...

CVE-2024-0042: Improper Certificate Validation

In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to local bypass of DRM content protection with no additional execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In tmuresettmutripcounter of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27221

A critical out-of-bounds write vulnerability exists in the ACPM subcomponent of Google Pixel devices due to a missing bounds check in the update_policy_data method. This flaw allows for local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The ...

CVE-2024-27220

A security vulnerability exists in the lpm_req_handler of the ACPM component on Google Pixel devices. This issue stems from a missing bounds check , which can lead to an out-of-bounds memory access . Successful exploitation could result in a local escalation of privilege without requiring additio...

CVE-2024-22009

A security vulnerability exists in the init_data function of a Google Pixel component due to a missing bounds check . This flaw can lead to an out-of-bounds write , potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. While ...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of a missing bounds check in the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the initdata method of the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the updatepolicydata method of the TBD module, which may result in out-of-bounds writes...