PT-2026-104703

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761...

PT-2026-106160

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in multiple functions of VirtualAudioControllerTest.java allows for a permission bypass. This issue can lead to local escalation of privilege witho...

CVE-2026-58841: Improper Privilege Management

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106141

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the shouldDisableUninstallButton function within ApplicationActionButtonsPreferenceController.java allows for a permission bypass. This flaw...

PT-2026-106139

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue enables local escalation of privilege without requiring additional...

CVE-2026-28625: Undefined Security Weakness

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28641: Undefined Security Weakness

In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CLEANSTART-2024-NV58280 logic error in the room key sharing functionality of Element Android before 1

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of Element Android before 1...

CLEANSTART-2024-FT51773 logic error in the room key sharing functionality of matrix-js-sdk (aka Matrix Javascript SDK) before 12

Security vulnerability affects the element-web package. A logic error in the room key sharing functionality of matrix-js-sdk aka Matrix Javascript SDK before 12...

CLEANSTART-2026-GD03162 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

CLEANSTART-2026-WY70417 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

ASB-A-514747079

In MapAllImages of imagemanager.cpp, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Rocky Linux 8 [CIQ] Security Update: poppler / poppler-cpp / poppler-cpp-debuginfo / poppler-cpp-devel / etc (crlsa-2022_7594)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227594 advisory. poppler: A logic error in the Hints::Hints function can cause denial of service CVE-2022-27337 Tenable has extracted the preceding description block directly from t...

ASB-A-515034370

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2026-98042

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...

NPM: ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

NPM: ip-address: isInSubnet and isHostInSubnet compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range vulnerability discovered by ? in WordPress Npm ip-address versions = 10.7.0...

SUSE CVE-2026-97982

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

SUSE CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

DEBIAN-CVE-2026-101912

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

CVE-2026-101913

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe80::/10 IPv6 link-local range. An attacker-controlled address elsewhere in fe80::/10 can...