CVE-2024-49722

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22430

In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48529

In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48530

In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in combination with other bugs, with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32331

In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32332

The Google Android operating system is affected by a memory corruption vulnerability caused by a use after free condition in multiple locations. This flaw allows an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. While sever...

btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()

...

CVE-2025-36899

There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36898

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36898

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Failed dependencies: libmsi1 is needed by veeam-guest-interaction-proxy

Challenge Attempting to add a Linux server as a managed server fails with the following error: Failed dependencies: libmsi1 is needed by veeam-guest-interaction-proxy Rocky Linux may also display the following error if the libmsi1 package is already installed: Failed dependencies: ntfs-3g is need...

CVE-2025-22429

In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22418

The Google Android operating system is affected by an elevation of privilege vulnerability (CVE-2025-22418) caused by intent redirection in multiple locations, which can result in a confused deputy condition. This flaw allows an attacker to gain elevated privileges on the system without requiring...

WordPress Ocean Extra plugin cross-site scripting vulnerability

WordPress Ocean Extra plugin is a free plugin for the WordPress platform, designed for the OceanWP theme, aiming to enhance the website building experience by adding extra functionality and flexibility. A cross-site scripting vulnerability exists in the WordPress Ocean Extra plugin, which stems...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38696

A memory buffer overflow vulnerability exists in the BootRom of UNISOC Chipsets due to a missing payload size check. This flaw allows for potential exploitation without requiring additional execution privileges. The impact is characterized as critical , with high scores for confidentiality, integ...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38693

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...