Cisco ASA OS Command Injection (CVE-2021-1476)

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

CVE-2026-78860

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

PT-2026-106154

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission bypass exists in the dialInternal function across multiple locations due to a confused deputy issue. A confused deputy is a security vulnerability...

PT-2026-106140

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An improper input validation issue exists in the checkCallerIsCertInstallerOrSelfInProfile function within CredentialStorageActivity.java. This flaw allows for a permission bypass, whi...

PT-2026-106148

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An integer overflow in the rw t4t update file function within rw t4t.cc can lead to an out-of-bounds write. This issue allows for local escalation of privilege without requiring user...

PT-2026-106145

Name of the Vulnerable Software and Affected Versions WifiPermissionsUtil.java affected versions not specified Description A missing permission check in the isSystem function of WifiPermissionsUtil.java allows for a possible sandbox escape. This issue can lead to local escalation of privilege...

PT-2026-106149

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth affected versions not specified Description An uninitialized pointer dereference in the handle le monitor device event function within msft.cc allows for a control-flow hijack in the privileged bluetooth process. This issue...

PT-2026-106152

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A resource exhaustion issue in the qsort function within libufdt sysdeps vendor.c can lead to an out-of-bounds write. This condition allows for local escalation ...

PT-2026-106156

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in the stpropnci process function within stpropnci.cc allows for a possible out-of-bounds write. This condition can be leveraged to...

PT-2026-104696

Name of the Vulnerable Software and Affected Versions aidl affected versions not specified Description A memory corruption issue exists in aidl caused by a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This flaw could allow a malicious...

PT-2026-104689

Name of the Vulnerable Software and Affected Versions battery affected versions not specified Description A missing bounds check in the battery component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This can lead to local...

PT-2026-106143

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A permission bypass exists in Settings caused by a confused deputy, a situation where a privileged entity is tricked by a less privileged one into performing an...

PT-2026-106141

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the shouldDisableUninstallButton function within ApplicationActionButtonsPreferenceController.java allows for a permission bypass. This flaw...

PT-2026-106142

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the updateState function of DeviceAdminAppsPreferenceController.java allows for a permission bypass. This issue enables local escalation of...

PT-2026-104708

Name of the Vulnerable Software and Affected Versions mtee affected versions not specified Description A missing bounds check in mtee allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it does not require use...

PT-2026-104695

Name of the Vulnerable Software and Affected Versions aidl affected versions not specified Description A missing permission check in aidl allows for a local escalation of privilege. This issue can be exploited by a malicious actor who has already obtained System privilege, and it requires no user...

PT-2026-104697

Name of the Vulnerable Software and Affected Versions Android AIDL affected versions not specified Description A memory corruption issue exists in aidl caused by a use-after-free condition, which occurs when a program continues to use a pointer after it has been freed. This flaw could allow a...

PT-2026-104702

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A memory corruption issue exists due to a use after free, which occurs when a program continues to use a pointer after it has been freed. This can lead to local escalation of privilege if a...

PT-2026-106165

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in the handle app val response function within btif rc.cc allows for potential code execution. This issue can lead to local escalation of...

PT-2026-104682

Name of the Vulnerable Software and Affected Versions neuropilot affected versions not specified Description A missing bounds check in neuropilot allows for an out of bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local...