CVE-2026-0187

In gsaswpkhashcompare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0197

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-8997

CVE-2019-8997 BlackBerry AtHoc バージョン 7.6 HF-567 より前の Management System コンソール における XML External Entity Injection XXE の脆弱性により、攻撃者が既存のフィールドに悪意を持って細工された XML を入力することで、アプリケーションサーバー上の任意のローカルファイルを読み取ったり、ネットワーク上でリクエストを行ったりする可能性があります。 報告者 Nolan B. Kennedy nxkennedy セキュリティアドバイザリ...

CVE-2019-12889

CVE-2019-12889 摘要 SailPoint Desktop Password Reset 7.2 存在一个未经身份验证的权限提升漏洞。仅具有本地访问 Windows 登录屏幕权限的用户可以将权限提升至 NT AUTHORITY\System。攻击者需要本地访问该机器才能成功利用此漏洞。攻击者必须将计算机从本地网络/广域网断开，并连接到一个可访问互联网的接入点/网络。此时，攻击者可以执行密码重置功能，这将弹出一个 Web 浏览器。浏览到调用本地 Windows 系统函数（例如文件上传）的网站将暴露本地文件系统。从那里，攻击者可以启动一个特权命令行 shell。 复现步骤： 1...

Exploit-CVE-2014-4113

Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...

CVE-2026-58767

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58767

CVE-2026-58767 is a local privilege escalation vulnerability in multiple functions of arm-smmu-v3.c in the Android kernel, caused by a logic error . An attacker with System execution privileges can exploit it without user interaction to gain higher privileges, resulting in high impact to confiden...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79019

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58755

CVE-2026-58755 is a local privilege escalation vulnerability in the ARM SMMU-v3 driver (smmu_install_nested_ste in arm-smmu-v3.c) affecting Android Pixel devices , as referenced in the Pixel September 2026 security bulletin. The root cause is a logic error in the nested STE installation path. An ...

CVE-2026-58751

CVE-2026-58751 is a use-after-free vulnerability in multiple functions of arm-smmu-v3.c (the ARM System MMU v3 driver), caused by a logic error. The flaw allows local escalation of privilege to System execution privileges, with no user interaction required. The vulnerability is tracked in the And...

CVE-2026-58739

CVE-2026-58739 is a confused deputy vulnerability in platform_msg_handler_init of default_msg_handlers.c within the GDMC subcomponent of Google Pixel devices. It enables a local elevation of privilege requiring System execution privileges and no user interaction. The Pixel Update Bulletin rates i...

EUVD-2026-79014

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58726

In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79009

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58724

CVE-2026-58724 is a use-after-free vulnerability in Android Pixel devices, caused by a race condition in multiple locations. It permits local privilege escalation requiring System execution privileges, with no user interaction needed. The CNA-assigned CVSS 3.1 score is 7.0 (HIGH) , reflecting hig...

CVE-2026-58724

In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58721

CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79008

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...