EUVD-2026-74032

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction...

EUVD-2026-74031

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...

EUVD-2026-74030

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

CVE-2026-58874

CVE-2026-58874 is a local privilege escalation vulnerability in Android's SmsController.java , caused by a missing permission check in multiple functions. An attacker with local access and low privileges can exploit it without user interaction to achieve full compromise of confidentiality, integr...

EUVD-2026-74028

In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58839

CVE-2026-58839 affects Android (per the 2026-09-01 Android Security Bulletin). The flaw resides in forEachLine within MountRegistry.cpp , where a buffer overflow causes an out-of-bounds read , enabling local privilege escalation without user interaction or additional execution privileges. The CVS...

EUVD-2026-74025

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74024

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58822

CVE-2026-58822 affects Android , specifically multiple functions in ftsmooth.c , where improper casting introduces a memory safety issue that can lead to remote code execution without additional privileges or user interaction. The vulnerability is rated CVSS 9.8 (CRITICAL) with a vector of AV:N/A...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74016

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55256

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74015

In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49927

CVE-2026-49927 affects Android , as referenced by the September 2026 Android Security Bulletin. The root cause is an integer overflow in multiple locations that can lead to an out-of-bounds write , enabling local privilege escalation with only low privileges required and no user interaction. The ...

EUVD-2026-74014

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49921

This Android vulnerability (tracked as ASB-A-503554490 in the September 2026 Android Security Bulletin ) is a heap buffer overflow in multiple unspecified locations. It can lead to remote code execution with no additional privileges and no user interaction required, rated CVSS 9.8 (Critical) . Th...

EUVD-2026-74013

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74011

In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49918

CVE-2026-49918 is an Android vulnerability caused by an out-of-bounds write due to an integer overflow in multiple functions. The flaw enables local privilege escalation with no additional execution privileges required and no user interaction needed for exploitation. The assigned CVSS 3.1 score i...