CVE-2026-58744

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56975

In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55317

In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-47812

CVE-2025-47812 Improper input validation led to Remote Code Execution to full system compromise 📘 Introduction: Julien Ahrens from RCE Security discovered a critical security vulnerability impacting WingFTP. Tracked as CVE-2025-47812, the vulnerability has a CVSS score of 10. Successful...

CVE-2026-58744

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79015

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58744

CVE-2026-58744 affects Android/Pixel devices (per the 2026-09-01 Pixel security bulletin ). The vulnerability is an improper input validation flaw in multiple locations that allows a local privilege escalation with low privileges required and no user interaction, resulting in high impact to confi...

CVE-2026-58691

CVE-2026-58691 is a local escalation of privilege vulnerability in the GPCA subcomponent of Google Pixel devices, specifically in the FsmReleaseKey function of fsm.c . The root cause is improper input validation that permits a permission bypass. Exploitation requires only low privileges , no user...

EUVD-2026-78999

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58691

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78998

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58683

CVE-2026-58683 is a Critical remote code execution vulnerability in the IP Multimedia Subsystem (Telephone subcomponent) of Google Pixel devices. The root cause is an out-of-bounds write due to improper input validation , exploitable over the network with low privileges required and no user inter...

CVE-2026-58683

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56975

CVE-2026-56975 affects the Cellular Modem component in Google Pixel devices (referenced in the Pixel September 2026 security bulletin ). The root cause is improper input validation , which can lead to a remote proximal/adjacent denial of service with low privileges required and no user interactio...

CVE-2026-56974

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-78979

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-56974

CVE-2026-56974 is a critical elevation-of-privilege vulnerability in libpixelimsmedia on supported Google Pixel devices, rooted in an out-of-bounds write in AudioRtpPayloadEncoderNode.cpp caused by improper input validation. The flaw could lead to remote code execution without additional privileg...

CVE-2026-56932

CVE-2026-56932 is a memory corruption vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by improper input validation . An attacker with System-level privileges can exploit it for local privilege escalation (EoP) without user interaction. The Pixel Update Bul...