CVE-2026-28624

In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28583

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Maono Link local privilege escalation

RISK EVALUATION Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. 2. RECOMMENDED PRACTICES Update to 4.0.80. 3. DESCRIPTION Maono Link 3.8.13 MaonoAiServices Windows service...

CVE-2026-78524

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-71345

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally...

CVE-2026-70296

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69819

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-77111

Adobe Commerce is affected by an Incorrect Authorization vulnerability (CWE-863) that allows a high-privilege attacker to bypass security features and obtain unauthorized write access , resulting in a limited disruption to availability . Exploitation requires no user interaction , operates over t...

CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

EUVD-2026-74030

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

CVE-2026-58848

CVE-2026-58848 affects multiple functions in alloc.c within the Android kernel , where a race condition permits unauthorized read/write access. An attacker with local, low privileges can exploit this to achieve local escalation of privilege without user interaction. The vulnerability is rated CVS...

EUVD-2026-74021

In ihevcdgettudatasize of ihevcdutils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55294

CVE-2026-55294 is a heap buffer overflow in the function ihevcd_get_tu_data_size of ihevcd_utils.c within the Android platform. The out-of-bounds write enables local escalation of privilege with only low privileges required and no user interaction. It is rated CVSS 3.1 7.8 (HIGH) . The vulnerabil...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

CVE-2026-55285 is an out-of-bounds write vulnerability in the openLogicalChannel function across multiple files within Android , as indicated by its inclusion in the Android Security Bulletin 2026-09-01 . The root cause is a missing bounds check , which can lead to local privilege escalation with...

CVE-2026-55277

CVE-2026-55277 affects Android in the checkUiccListenConfigNeeded function within RoutingManager.cpp . The root cause is a missing bounds check that allows an out-of-bounds write , potentially leading to remote (proximal/adjacent) code execution with no additional privileges required and no user ...