3198 matches found
PT-2026-4699
Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description Improper input validation in multiple functions of AccessibilityManagerService.java can lead to a persistent local denial of service. This issue does not require additional executio...
PT-2026-4691
Name of the Vulnerable Software and Affected Versions Android devices with MDM affected versions not specified Description A logic error in the performPreInstallChecks function within InstallRepository.kt allows for a bypass of the Mobile Device Management MDM policy. This flaw enables local...
PT-2026-4714
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions within ubsan throwing runtime.cpp. This issue can result in a persistent denial of service and may allow a local attacker to achieve escalatio...
PT-2026-4690
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A permissions bypass in the Framework component allows for the resetting of user-selected permission selections in multiple locations. This flaw enables a local escalation of privilege withou...
PT-2026-4713
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description Multiple functions within ubsan throwing runtime.cpp are subject to resource exhaustion, which can result in a persistent local denial of service. This issue can be triggered without requirin...
PT-2026-4686
In jump to payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-4711
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions of ubsan throwing runtime.cpp. This issue allows a remote attacker to cause a crash, resulting in a denial of service without requiring...
PT-2026-4700
In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2026-4708
In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2026-4694
Name of the Vulnerable Software and Affected Versions Settings.java affected versions not specified Description A logic error in the enableSystemPackageLPw function within Settings.java may prevent location access from functioning correctly. This could lead to local escalation of privilege withou...
PT-2026-4685
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-4710
Name of the Vulnerable Software and Affected Versions GrapheneOS versions prior to 2026030200 Description An integer overflow in multiple functions within ubsan throwing runtime.cpp can lead to a persistent denial of service. This issue allows for remote denial of service without requiring...
PT-2026-4703
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the PackageInstallerService.java component, specifically within the createSessionInternal function. This issue allows an application to potentially alter its ownership due to...
PT-2026-4695
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added a critical security flaw affecting Broadcom VMware vCenter Server that was patched in June 2024 to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The vulnerability ...
January 24, 2026—KB5078129 (OS Builds 19045.6812 and 19044.6812) Out-of-band
None None...
EuskalHack Security Congress IX Call for Papers
EuskalHack Security Congress ninth edition is a new proposal from the EuskalHack Computer Security Association, with the aim to promote the community growth and the culture in the digital security field. As usual, in this new edition proximity to our public and technical quality will be our...
January 13, 2026—KB5073695 (Monthly Rollup)
None None...