CVE-2026-58704: Improper Authorization

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56973: Protection Mechanism Failure

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55359: Protection Mechanism Failure

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55302: Protection Mechanism Failure

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0197: Exposure of Sensitive Information to an Unauthorized Actor

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0189: Protection Mechanism Failure

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0187: Protection Mechanism Failure

In gsaswpkhashcompare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0186: Protection Mechanism Failure

In acinitonesswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56882: Exposure of Sensitive Information to an Unauthorized Actor

In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-92068: Origin Validation Error

Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92034: Origin Validation Error

Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

PT-2026-92347

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A logic error in the code allows a permission bypass, which could lead to local escalation of privilege. This issue requires System execution privileges and does not require user interacti...

PT-2026-92371

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92294

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the addr remap address map function within the remap.c file allows for a local escalation of privilege. An attacker can exploit this issue to ga...

PT-2026-92367

In smmu detach dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-91919

The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP initiation process. This weakness can be exploited by an attacker to discover valid usernames within the system. The...

PT-2026-92285

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the ac init one sswrp function within the init.c file allows for a local escalation of privilege. This issue enables an attacker to gain System...

PT-2026-91920

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error message that explicitly indicates the username is already in use...

CVE-2026-55304: Protection Mechanism Failure

In addrremapaddressmap of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92370

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...