CVE-2026-58556

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-44662

A flaw was found in samba's pamwinbind. When mkhomedir is enabled, pamwinbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory a common default for system accounts can...

CVE-2026-58554

CVE-2026-58554 is a permission control vulnerability in the Settings module. The root cause is permission control weaknesses that can lead to confidentiality impact. CVSS-3.1 measures: Local attack vector, Low attack complexity, No privileges required, User interaction required, Confidentiality i...

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-44659

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58554

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58555

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58555

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-58555.

EUVD-2026-44658

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58553

CVE-2026-58553 is described as an out-of-bounds read in the image codec module with potential impact to service confidentiality. Metrics show CVSSv3.1: Local attack vector, Low attack complexity, No privileges required, No user interaction, Confidentiality impact None, Integrity impact None, Avai...

CVE-2026-58552

CVE-2026-58552 describes an out-of-bounds read in the image codec module. The CVSS v3.1 base score is 5.1 (MEDIUM); attack vector: LOCAL , no privileges required, no user interaction. Impacts: confidentiality and availability may be affected; integrity: NONE . The connected documents provide no c...

EUVD-2026-44656

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-44655

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58551

CVE-2026-58551 is an out-of-bounds read vulnerability in the image codec module. The CVSS 3.1 vector indicates LOCAL attack, low complexity, no privileges required, no user interaction, with Confidentiality and Availability impacts listed as LOW; Integrity impact is NONE. Base score 5.1 (MEDIUM)....

CVE-2026-58551

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-44654

Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-58550

Technical details (affected product, component, versions, root cause, exploitation) are not publicly available in the provided documents. Monitor Huawei bulletins for updates; the available info only notes an out-of-bounds read with local access and limited impact.

CVE-2026-58549

CVE-2026-58549 is an out-of-bounds read vulnerability in the image codec module. The impact is described as potentially affecting service confidentiality. The CVSS 3.1 vector indicates a Local attack with Low attack complexity and no privileges required, no user interaction, and an unchanged scop...

MAL-2026-10672 Malicious code in northstart-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa58bcfb4f89faf624c1f99bb552e597cc2e061330a2e98e72e6f401bb70b4f9 The pypi package northstart-sdk 0.2.1 executes attacker-controlled code as a side effect of import northstartsdk. The top-level init.py assigns...

MAL-2026-10669 Malicious code in dbconnectify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23c446b06120537793ebc07d748d8de5334ae4ec6779bda5368885c72216e81 The package exposes a method queryDBConnect that performs an HTTP GET against a URL stored as a base64-encoded constant HASHKEY decoded at runtime vi...