CVE-2026-56198

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

EUVD-2026-74029

In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74025

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58839

CVE-2026-58839 affects Android (per the 2026-09-01 Android Security Bulletin). The flaw resides in forEachLine within MountRegistry.cpp , where a buffer overflow causes an out-of-bounds read , enabling local privilege escalation without user interaction or additional execution privileges. The CVS...

EUVD-2026-74024

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58823

CVE-2026-58823 affects the Android platform, as indicated by the Android Security Bulletin reference (ASB-A-522376080, 2026-09-01). The vulnerability is a missing bounds check in the stpropnci_process_std function within stpropnci_std.cc, causing a memory safety issue. An attacker with local, low...

EUVD-2026-74021

In ihevcdgettudatasize of ihevcdutils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55294

CVE-2026-55294 is a heap buffer overflow in the function ihevcd_get_tu_data_size of ihevcd_utils.c within the Android platform. The out-of-bounds write enables local escalation of privilege with only low privileges required and no user interaction. It is rated CVSS 3.1 7.8 (HIGH) . The vulnerabil...

CVE-2026-55290

CVE-2026-55290 is an out-of-bounds heap read in the setTo function of ResourceTypes.cpp within the Android Framework component, caused by a missing bounds check. It can lead to local information disclosure with low privileges required and no user interaction needed for exploitation. The vulnerabi...

EUVD-2026-74020

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55290

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

CVE-2026-55285 is an out-of-bounds write vulnerability in the openLogicalChannel function across multiple files within Android , as indicated by its inclusion in the Android Security Bulletin 2026-09-01 . The root cause is a missing bounds check , which can lead to local privilege escalation with...

CVE-2026-55277

CVE-2026-55277 affects Android in the checkUiccListenConfigNeeded function within RoutingManager.cpp . The root cause is a missing bounds check that allows an out-of-bounds write , potentially leading to remote (proximal/adjacent) code execution with no additional privileges required and no user ...

CVE-2026-49932

This local privilege escalation vulnerability exists in the parseParts function of PduParser.java within the Android platform, as tracked under the September 2026 Android Security Bulletin. The root cause is an out-of-bounds read due to a heap buffer overflow , which can be exploited with low pri...

EUVD-2026-74015

In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49927

CVE-2026-49927 affects Android , as referenced by the September 2026 Android Security Bulletin. The root cause is an integer overflow in multiple locations that can lead to an out-of-bounds write , enabling local privilege escalation with only low privileges required and no user interaction. The ...

EUVD-2026-74014

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74011

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...