PT-2026-106158

In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Fedora 45 : cri-o1.36 (2026-77abfa2cdd)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77abfa2cdd advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...

PT-2026-104683

Name of the Vulnerable Software and Affected Versions neuropilot affected versions not specified Description A missing bounds check in neuropilot allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local...

PT-2026-106140

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An improper input validation issue exists in the checkCallerIsCertInstallerOrSelfInProfile function within CredentialStorageActivity.java. This flaw allows for a permission bypass, whi...

PT-2026-106148

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An integer overflow in the rw t4t update file function within rw t4t.cc can lead to an out-of-bounds write. This issue allows for local escalation of privilege without requiring user...

PT-2026-106141

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the shouldDisableUninstallButton function within ApplicationActionButtonsPreferenceController.java allows for a permission bypass. This flaw...

PT-2026-106142

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the updateState function of DeviceAdminAppsPreferenceController.java allows for a permission bypass. This issue enables local escalation of...

PT-2026-104708

Name of the Vulnerable Software and Affected Versions mtee affected versions not specified Description A missing bounds check in mtee allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it does not require use...

PT-2026-106139

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue enables local escalation of privilege without requiring additional...

CVE-2026-49885: Integer Overflow or Wraparound

In rwt4tupdatefile of rwt4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49880: Undefined Security Weakness

In multiple functions of nfanfceeact.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20589: Out-of-bounds Write

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606...

CVE-2026-20579: Out-of-bounds Write

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800...

CVE-2026-105293: Improper Limitation of a Pathname to a Restricted Directory

Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...

CVE-2026-28625: Undefined Security Weakness

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-63267: Server-Side Request Forgery (SSRF)

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2026-105249: Use After Free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-86671: Server-Side Request Forgery (SSRF)

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-20588: Out-of-bounds Write

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607...