EUVD-2026-79156

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0197

CVE-2026-0197 is a local information disclosure vulnerability in the VPU (Video Processing Unit) component of Android Pixel devices, caused by a logic error in the code. An attacker with System execution privileges can exploit it without user interaction to disclose sensitive information. The vul...

CVE-2026-0197

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0189

CVE-2026-0189 affects Android (referenced in the 2026-09-01 Pixel security bulletin ). The vulnerability resides in the ac_init_policy function within init.c , where a logic error permits a permission bypass . The result is a local escalation of privilege that requires no additional execution pri...

EUVD-2026-79153

In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0187

CVE-2026-0187 is a local privilege escalation vulnerability in Android (Pixel), located in the function gsa_sw_pk_hash_compare within the file image-auth-srv.c . The root cause is a logic error in the code, which can lead to an attacker gaining elevated privileges. Exploitation requires System-le...

EUVD-2026-79152

In gsaswpkhashcompare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79151

In acinitonesswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0186

CVE-2026-0186 is a local privilege escalation vulnerability in the ac_init_one_sswrp function of init.c within an Android Pixel device component, as referenced in the September 2026 Pixel Security Bulletin . The root cause is a logic error in the code that allows an attacker with System execution...

EUVD-2026-79147

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0171

CVE-2026-0171 is an out-of-bounds write in the BigWave component of Google Pixel devices, caused by a logic error in the code. The vulnerability can lead to remote code execution (classified as EoP/High severity in the Pixel bulletin) with only low privileges required and no user interaction need...

CVE-2026-0171

In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26465

CVE-2025-26465 The OpenSSH client contains a logic error between versions 6.8p1 to 9.9p1 inclusive that makes it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled, allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to i...

UBUNTU-CVE-2026-89671

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setacl by argp-mask nfsd3procsetacl calls setposixacl unconditionally for both ACLTYPEACCESS and ACLTYPEDEFAULT, passing argp-aclaccess and argp-acldefault verbatim. The NFSv3 ACL decoder only populates those...

CVE-2026-29810

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

EUVD-2026-77075

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

Linux Distros Unpatched Vulnerability : CVE-2026-89558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: fix stilldegraded being inverted in raid10syncrequest Commit fe6a19d40ceb md/md-bitmap: merge mdbitmapstartsync into bitmapoperations converted...

Linux Distros Unpatched Vulnerability : CVE-2026-81010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/waitid: honor taskwork cancellation iowaitidcb may run through the fallback taskwork path when taskworkadd can no longer queue work to the originating...

Linux Distros Unpatched Vulnerability : CVE-2026-89678

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix partial-write detection in nfsddirectwrite nfsddirectwrite walks a list of write segments and, after each vfsiocbiterwrite, tries to detect a short...

CVE-2026-89687

In the Linux kernel, the following vulnerability has been resolved: nfsd: ensure nfsdfiledoacquire does not use a non-opened file -atomicopen is permitted to return success without actually opening the file. It indicates this by calling finishnoopen. This means dentrycreate can return a file whic...