EUVD-2026-115082

DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-115081

OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-115080

UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-115077

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-115073

DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-115072

Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality...

EUVD-2024-55832

The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames exist in both primary and secondary user stores. This occurs because the lock condition is only applied to the secondary user store account in such scenarios, allowin...

EUVD-2026-115017

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 Note: For MT6880, MT6890 / ALPS11297423 Note: For MT6813,...

EUVD-2026-114795

The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an archived repository, or a holder of such a user's write-scoped token, could replace or delete release assets while keeping their download...

EUVD-2026-113762

HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible...

EUVD-2026-113489

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...

EUVD-2026-113478

Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use, replace with another allocation and cause arbitrary memory reads or writes to physical memory pages. A memory buffer managed by a CPU thread of control driver and accessed by ...

EUVD-2026-113279

socket.getaddrinfo previously accepted null bytes within host and port parameters which can cause the values to be silently truncated...

EUVD-2025-211213

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

EUVD-2025-211212

Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user...

EUVD-2026-112724

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...

EUVD-2026-112723

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...

EUVD-2026-112400

When the allowedscopes configuration is enabled, the OAuth2 token introspection mechanism does not immediately invalidate a token in the cache after a revocation request. This results in a scenario where an access token that was introspected immediately before a revocation request may be returned...

EUVD-2026-112399

The authentication endpoint generates an error message that includes reflected data directly from the request without sufficient sanitization or encoding. This allows an attacker to inject malicious scripts that can be executed in the context of a victim's browser. Successful exploitation enables...

EUVD-2026-112282

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...