CVE-2026-20503

CVE-2026-20503 affects the Modem component in MediaTek devices. A missing bounds check can cause a system crash, leading to remote denial of service when a user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are r...

EUVD-2026-72195

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196...

CVE-2026-20501

MediaTek's vdec (video decoder) is affected by a heap buffer overflow that can cause an out-of-bounds write, enabling local escalation of privilege without requiring any prior execution privileges or user interaction. The vulnerability is rated CVSS 8.4 (HIGH) with impacts to confidentiality, int...

EUVD-2026-72194

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197...

VulnCheck KEV: CVE-2026-75650

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

PT-2026-86597

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197...

CVE-2023-7028

CVE-2023-7028 Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE CVE-2023-7028 can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication...

PT-2026-86916

Based on the technical breakdown published by Sansec's Forensics Team and Adobe's own bulletin APSB26-146, Sept 7, here's the architectural shape of this one: Stage 1: attacker abuses a styles parameter in a GraphQL request to plant PHP inside Magento-generated content a report/log file, bypassin...

CVE-2026-83961 ColdFusion | Improper Authentication (CWE-287)

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of...

CVE-2026-83961

Adobe ColdFusion is affected by an Improper Authentication vulnerability (CWE-287) that could allow an unauthenticated attacker to escalate privileges and gain limited read and write access . By default, the vulnerable component is restricted to an administrative network zone , and exploitation r...

EUVD-2026-70530

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of...

ASB-A-464526458

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

ASB-A-482992246

In hidppprobe, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-469414216

In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-459460951

In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-503553866

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-499350302

In multiple functions of llcpcore.c, there is a possible use after free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-518813709

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-508645975

In readbootregion of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-508704568

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...