EUVD-2026-78997

In gftatestsetconfig of gftatest.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58678

CVE-2026-58678 is a permission bypass in the Bootloader of Google Pixel devices, caused by a logic error in the code. The vulnerability allows local escalation of privilege , requiring System execution privileges, with no user interaction needed for exploitation. It was disclosed in the Android P...

EUVD-2026-78996

In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-45466

CVE-2025-45466 这是CVE-2025-45466的详细信息 CVE披露：CVE-2025-45466 摘要 在 Unitree Go1 机器人狗（所有版本 使用硬编码密码 4. 以 root 权限执行任意操作。 结果 如下方截图所示，root 访问密码保存在 passwd.sh 中（图1）。该文件可在同一固件包中找到（图2） 图1： 图2：...

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

CVE-2026-57014 is an out-of-bounds write in the NFC HAL component (phNxpNciHal_ext_process_nfc_init_rsp in phNxpNciHal_ext.cc), caused by a missing bounds check. It affects Android (Pixel) devices and allows a local attacker with low privileges to achieve escalation of privilege with full impact ...

EUVD-2026-78993

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57014

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57012

CVE-2026-57012 affects the Setup Wizard component on Android Pixel devices, as indicated by the reference to the September 2026 Pixel security bulletin. The root cause is a missing permission check that allows a remote package install, enabling remote escalation of privilege without requiring any...

EUVD-2026-78992

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57012

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

msi-central_privesc

CVE-2022-38532 MSI Center 桌面应用程序中的本地权限提升。 该漏洞存在于 MSI.CentralServer.exe 的 "CFeatures" 中。MSI.CentralServer.exe 是一个收集系统信息的应用程序，它与 MSI.TerminalServer.exe 协作。我们可以在 "CMDAutoUpdateSDK" 中调用的 ExecuteTask 函数，使我们有机会以管理员权限运行带有自定义参数的可执行文件。相关端口只能从 localhost 访问。 漏洞详情 你可以使用任意 .NET 反编译器轻松反汇编...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57008

CVE-2026-57008 is an information disclosure vulnerability in the Modem component of Android (Pixel) devices, caused by improper input validation . It allows remote disclosure with only low privileges required and no user interaction , resulting in high confidentiality impact with no integrity or ...

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78991

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78990

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57006

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...