Lucene search
+L

53584 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/06/01 12:0 a.m.16 views

VulnCheck KEV: CVE-2025-48595

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.5AI score0.01714EPSS
SaveIn wildExploits1References5
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.22 views

PT-2026-45569

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the Framework component of the Android operating system leads to incorrect code generation and potential tapjacking. Tapjacking is a technique where an attacker overlays a...

7.8CVSS7.2AI score0.00075EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.49 views

PT-2026-45586

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An out-of-bounds read exists in the validateNode function within the ResourceTypes.cpp script of the Framework component. This issue is caused by an incorrect bounds check, which may allow a...

7.8CVSS7.3AI score0.00079EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.41 views

PT-2026-45577

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description An incorrect bounds check in the setTo function within ResourceTypes.cpp can lead to a read out of bounds. This issue allows for local information disclosure without requiring...

3.3CVSS5.6AI score0.00069EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.34 views

PT-2026-45590

In multiple functions of ubsan throwing runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00265EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.35 views

PT-2026-45591

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00071EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.21 views

PT-2026-45254

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description A heap buffer overflow in the wlan AP driver can lead to memory corruption. This issue allows for remote code execution with User execution privileges, requiring no user interaction fo...

8CVSS6.4AI score0.00435EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.18 views

PT-2026-45600

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00073EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.28 views

PT-2026-45593

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

6AI score0.00082EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.24 views

PT-2026-45567

Name of the Vulnerable Software and Affected Versions Android versions 14 through 16 QPR2 Description An integer overflow exists in multiple locations within the Android Framework, which is the core layer of APIs and system services that applications interact with. This issue allows for local...

8.4CVSS6.6AI score0.01714EPSS
SaveExploits1References112
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.26 views

PT-2026-45570

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the bta jv rfcomm connect function within the bta jv act.cc script allows for a bypass of bonding required for secure connections. This flaw enables a local attacker to achie...

7.8CVSS7.3AI score0.00083EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.25 views

PT-2026-45597

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Obfuscation in multiple locations may result in a misleading user interface. This issue allows for local escalation of privilege without requiring additional execution privileges or...

7.8CVSS5.9AI score0.00073EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.27 views

PT-2026-45592

In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00075EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.30 views

PT-2026-45257

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10873936; Issue ID: MSV-6784...

5.8AI score0.00108EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.22 views

PT-2026-45596

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description An issue exists in the Android Framework component due to improper access control and an over-privileged shell user. This allows for the execution of code within the launcher proces...

7.8CVSS6AI score0.00067EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.30 views

PT-2026-45598

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description In the getApplicationLabel function of KeyChainActivity.java, misleading or insufficient user interface elements may allow a user to be tricked into approving...

7.8CVSS5.9AI score0.00058EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.16 views

PT-2026-45627

Name of the Vulnerable Software and Affected Versions Dräger Infinity Explorer C700 affected versions not specified Description A privilege escalation issue allows attackers to break out of kiosk mode—a restricted user interface that limits access to specific applications—and access the underlyin...

8.6CVSS5.4AI score0.00118EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.20 views

PT-2026-45255

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10886526; Issue ID: MSV-6791...

5.8AI score0.00114EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.15 views

PT-2026-45612

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple functions may cause a desync in persistence. This issue allows for local escalation of privilege without requiring addition...

7.8CVSS5.9AI score0.00073EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.19 views

PT-2026-45604

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap buffer overflow in the Load function of LoadedArsc.cpp allows for an out of bounds write. This issue can lead to local escalation of privilege without...

7.8CVSS7.4AI score0.00075EPSS
SaveExploits0References8
Rows per page
Query Builder