Google Android Denial of Service Vulnerability (CNVD-2026-13147)

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which stems from improper input validation in multiple functions of ProfilingService.java, and can be exploited by an attacker to cause a denial of service...

Google Android elevation of privilege vulnerability (CNVD-2026-14649)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that could be initiated anywhere due to proxy obfuscation in executeRequest of ActivityStarter.java. An attacker can exploit the vulnerability to gain...

Google Chrome Skia integer overflow vulnerability (CNVD-2026-13797)

Google Chrome is a free web browser developed by Google Inc. Google Chrome Skia suffers from an integer overflow vulnerability that stems from improper handling of integer values and can be exploited by remote attackers to execute arbitrary code...

Google Android Information Disclosure Vulnerability (CNVD-2026-13142)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Denial of Service Vulnerability (CNVD-2026-14647)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that stems from improper input validation in multiple locations, which can be exploited by an attacker to cause a denial of service...

Google Android suffers from unspecified vulnerability (CNVD-2026-13151)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause local elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2026-13148)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a logic error in exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, which can be exploited by an attacker...

Google Android Permission Elevation Vulnerability (CNVD-2026-31523)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a vulnerability in Google Android, which stems from a logical error in the removePermission function. Attackers can exploit this vulnerability to escalate their privileges...

Google Android Out-of-Bounds Write Vulnerability (CNVD-2026-18788)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds write vulnerability that can be exploited by attackers to cause memory corruption and local elevation of privilege...

ChurchCRM Cross-Site Scripting Vulnerability (CNVD-2026-16683)

ChurchCRM is ChurchCRM open source an open source CRM system for churches. ChurchCRM suffers from a cross-site scripting vulnerability that originates from an authenticated user being able to store a JavaScript payload, no details of the vulnerability are provided at this time...

IBM Cloud Pak System Information Disclosure Vulnerability (CNVD-2026-13784)

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from International Business Machines IBM. The product supports deploying, managing and moving application environments across hybrid clouds. An information disclosure vulnerability exists in...

Google Android Permission Elevation Vulnerability (CNVD-2026-31521)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a vulnerability related to privilege escalation, which stems from the lack of privilege checks. Attackers can exploit this vulnerability to escalate their privileges...

Google Chrome Security Bypass Vulnerability (CNVD-2026-18792)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Adobe Substance 3D Stager suffers from an out-of-bounds write vulnerability (CNVD-2026-12697)

Substance 3D Stager is the United States of America Ordoby Adobe company launched a dedicated to the 3D scene set, lighting settings and high-quality rendering of professional software. An out-of-bounds write vulnerability exists in Adobe Substance 3D Stager, which can be exploited by attackers t...

Multiple Apple Products Information Disclosure Vulnerability (CNVD-2026-14490)

Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. An information disclosure vulnerability exists in multiple Apple products and is caused due to a logic issu...

Microsoft Excel Elevation of Privilege Vulnerability (CNVD-2026-16158)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Excel, which can be exploited by an attacker to elevate privileges...

OpenClaw has an unspecified vulnerability (CNVD-2026-13376)

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from a security vulnerability that stems from logging not desensitizing Telegram bot tokens, which can be exploited by an attacker to cause token disclosure...

Microsoft Excel Buffer Overflow Vulnerability (CNVD-2026-12553)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A buffer overflow vulnerability exists in Microsoft Excel. The vulnerability stems from the program's failure to properly validate the length and size of input data, which can be exploited by an attacker ...

OpenClaw has an unspecified vulnerability (CNVD-2026-13375)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that stems from the fact that the confirmation dialog box for openclaw://agent deep links only displays the first 240 characters of the message but executes the full message,...

OpenClaw Access Control Error Vulnerability (CNVD-2026-13408)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an access control error vulnerability. The vulnerability stems from a mismatch between rawCommand and command in the node host system.run handler, which can be exploited by an attacker to cause the...