84417 matches found
PT-2026-88220
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the btm sec encrypt change function within btm sec.cc allows for a downgrade attack. This issue enables remote information disclosure without...
PT-2026-88224
Name of the Vulnerable Software and Affected Versions Android OS affected versions not specified Description A logic error in multiple functions of RemoteViews.java allows a bypass of background activity launch restrictions. This flaw enables local escalation of privilege without requiring...
CVE-2026-69578: Numeric Truncation Error
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-0065: Protection Mechanism Failure
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...
CVE-2026-28602: Improper Access Control
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87466
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69482: Creation of Temporary File in Directory with Insecure Permissions
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
CVE-2026-69535: Numeric Truncation Error
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
PT-2026-87232
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...
ROS-20260908-73-0046
The vulnerability in xorg-x11-drv-nvidia is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260908-73-0045
The vulnerability in nvidia-kmod is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-87776
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use after free issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally on the system. Use after free is a memory corruption...
Linux Distros Unpatched Vulnerability : CVE-2026-19872
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and...
AlmaLinux 8 : xmlrpc-c (ALSA-2026:64772)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...
PT-2026-88244
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the serviceClassExists function within InCallController.java allows for arbitrary code execution. This issue can lead to local escalation of privilege without requiring...
CVE-2026-69450: Out-of-bounds Read
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87651
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-28655: Protection Mechanism Failure
In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...