CVE-2026-70717

CVE-2026-70717 affects Oracle Autonomous Health Framework's Cluster Health Analyzer component (versions 26.1.0, 26.2.0, 26.3.1, 26.5.0, 26.5.2). A low-privileged attacker with physical segment access can compromise the framework with scope-change impact to other products, causing unauthorized dat...

security-advisories

Threat Lance Security Advisories Public security advisory rep...

EUVD-2026-21208

An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific genuine BGP packet in an already established BGP session to reset only that session causing a Denial of Service DoS. An attacker repeatedly...

CVE-2025-68135

EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the TbdController loop, leading to its caller and itself to silently terminates. Thus, this leads to a denial of service as it is responsible of SDP and ISO15118-20 servers...

CVE-2025-68135

EVerest (EV charging software stack) prior to version 2025.10.0 has a vulnerability in the TbdController loop where C++ exceptions are not properly handled, causing the loop and its caller to terminate silently and leading to a denial of service affecting SDP and ISO15118-20 servers. The issue is...

CVE-2025-68135 EVerest's inadequate exception handling leads to denial of service

EVerest is an EV charging software stack. Prior to version 2025.10.0, C++ exceptions are not properly handled for and by the TbdController loop, leading to its caller and itself to silently terminates. Thus, this leads to a denial of service as it is responsible of SDP and ISO15118-20 servers...

CVE-2025-36894: NULL Pointer Dereference

In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In tmuresettmutripcounter of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27221

A vulnerability exists in the update_policy_data function of a TBD component (identified as ACPM on Google Pixel devices) due to a missing bounds check. This flaw allows for an out-of-bounds write , which could lead to local escalation of privilege without requiring additional execution privilege...

CVE-2024-27220

A security vulnerability exists in the ACPM component of Google Pixel devices due to a missing bounds check in the lpm_req_handler method. This flaw allows for an out-of-bounds memory access , which could lead to a local escalation of privilege (EoP) without requiring additional execution privile...

CVE-2024-22009

A critical Elevation of Privilege (EoP) vulnerability exists in the ACPM component of Google Pixel devices. The issue stems from a missing bounds check in the init_data function, which can lead to an out-of-bounds write . This flaw could allow an attacker to escalate privileges locally without re...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the initdata method of the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the initdata method of the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of a missing bounds check in the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the updatepolicydata method of the TBD module, which may result in out-of-bounds writes...

Integer overflow

In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 108 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 108.0.5359.71 Mac/linux and 108.0.5359.71/72 Windows contains a number of fixes and improvements -- a list of changes is...

Stable Channel Update for ChromeOS

The Stable channel is being updated to 106.0.5249.112 Platform version: 15054.98.0 for most ChromeOS devices and will be rolled out over the next few days. For Chrome browser fixes, see the Chrome Desktop release announcement. If you find new issues, please let us know one of the following ways:...

CVE-2021-0943

In MMUMapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...

Design/Logic Flaw

In TBD of keymasteripc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Androi...