97561 matches found
CVE-2026-65767
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...
EUVD-2026-56774
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability
...
CVE-2026-65767 Microsoft Teams for Android Spoofing Vulnerability
...
CVE-2026-65767
Microsoft Teams for Android is affected by CVE-2026-65767 due to improper neutralization of input during web page generation (XSS). Attack requires network access with low privileges and no user interaction; an authorized attacker could spoof content. The CVSS v3.1 base score is 8.8 (HIGH). Affec...
EUVD-2026-56290
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
MediaTek Tablet Vulnerabilities, August 2026 - Lenovo Support US
No description provided...
CVE-2026-70639
A flaw was found in llama.cpp. A null pointer dereference vulnerability exists in the LLaMA-Android JNI wrapper. This flaw allows an attacker to provide a malicious or corrupt model file, which causes the bench1model function to attempt to use an invalid memory address. This leads to a crash of t...
CVE-2026-19146
A flaw was found in Google Chrome on Android, specifically within its Graphics Processing Unit GPU component. A remote attacker, after compromising the browser's renderer process, could exploit an uninitialized memory vulnerability by tricking a user into visiting a specially crafted HTML page...
CVE-2026-19154
An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=532941869 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-19141
A flaw was found in Chromium. This use-after-free vulnerability in the Resources component on Android could allow a remote attacker, who has already compromised the renderer process, to potentially escape the sandbox. This could be achieved by enticing a user to visit a specially crafted HTML pag...
CVE-2026-19143
A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...
CVE-2026-19137
A flaw was found in Google Chrome on Android. This vulnerability, a use-after-free error in the WebGL component, could be exploited by a remote attacker. After compromising the renderer process, the attacker could craft a malicious HTML page to trigger the flaw. This could potentially lead to a...
Microsoft Teams Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
Microsoft Teams for Android Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network...
Exploit for CVE-2026-18907
CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download H...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local p...
Mira Hormone Monitor, Mira Android App
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized health profile information, make changes to health information, cause a denial-of-service condition, disclose session token information, and obtain control of user accounts. 2...
PT-2026-70927
When the Mira Android app opens in-app WebView content e.g., shop redirect flows, the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web...
PT-2026-70933
The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advertisement name only, with no cryptographic peripheral authentication, MAC allowlist, or bonded-identity check. An attacker could capture live session token...