CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2009-0182

VUPlayer 2.49 Desbordamiento de búfer local para ejecución arbitraria de código Versión del programa: VUPlayer 2.49 Vulnerabilidad: desbordamiento de búfer local al importar un archivo de lista de reproducción .wax que conduce a la ejecución arbitraria de código Explotación: Desbordamiento de búf...

EUVD-2026-78987

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78979

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-56974

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-56974

CVE-2026-56974 is a critical elevation-of-privilege vulnerability in libpixelimsmedia on supported Google Pixel devices, rooted in an out-of-bounds write in AudioRtpPayloadEncoderNode.cpp caused by improper input validation. The flaw could lead to remote code execution without additional privileg...

EUVD-2026-78978

In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56967

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56967

CVE-2026-56967 is a heap buffer overflow in the Cellular Modem component of Google Pixel devices, enabling remote code execution (RCE) from an adjacent network with low privileges and no user interaction. Google classifies it as Critical severity (CVSS 3.1 base score 8.0 HIGH ), with high impact ...

EUVD-2026-78975

In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78974

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56932

CVE-2026-56932 is a memory corruption vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by improper input validation . An attacker with System-level privileges can exploit it for local privilege escalation (EoP) without user interaction. The Pixel Update Bul...

CVE-2026-56932

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78967

In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56920

CVE-2026-56920 is a Critical remote code execution vulnerability in the VPU (Video Processing Unit) component of Google Pixel devices. The flaw is an out-of-bounds write in the function s_decode_vui_param within fw_hevc_dec_header.c, caused by a logic error during HEVC video decoding. Exploitatio...

CVE-2026-56920

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78964

In sdecodevuiparam of fwhevcdecheader.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56915

CVE-2026-56915 is a local privilege escalation vulnerability in the bigo_worker_thread function of bigo.c , caused by a race condition . It affects Android (Pixel) devices, as indicated by the 2026-09-01 Pixel security bulletin reference and the associated Google OSV entry (PUB-A-508686178). Expl...

CVE-2026-56907

CVE-2026-56907 affects the VPU (Video Processing Unit) component in Google Pixel devices, as tracked in the Pixel security bulletin of 2026-09-01 and OSV entry PUB-A-510463247 . The root cause is a shared memory overwrite due to improper input validation , which can lead to local privilege escala...