CVE-2025-4960

CVE-2025-4960 affects macOS via the EPSON printer driver installer’s com.epson.InstallNavi.helper, which exposes privileged functionality due to improper authorization handling and weak client authentication over XPC. The API flow uses overly permissive custom rights registered in /var/db/auth.db...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability affects Firefox 147 and Thunderbird 147...

Exploit for CVE-2025-48593

🚨 CVE-2025-48593 Zero-Click Remote Code Execution in Android...

EUVD-2025-26892

Malicious code in bioql PyPI...

CVE-2025-26439

In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead of the system component due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-26439

A logic error in the getComponentName function of AccessibilitySettingsUtils.java within the Framework component of Wear OS allows a malicious Talkback service to be enabled instead of the system component. This vulnerability can lead to local escalation of privilege (EoP) with no additional exec...

The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that originates in a system component that could lead to elevated privileges...

The vulnerability of the afs component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the afs component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Google Android Code Execution Vulnerability (CNVD-2025-10930)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Android heap buffer overflow vulnerability (CNVD-2025-15179)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a heap buffer overflow vulnerability, which is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Wear OS Security Bulletin—February 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2025-02-05 or later from the February 2025 Android Security Bulletin in addition to all issues in this bulletin. We encourage al...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a heap buffer overflow vulnerability, which is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused by a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-1034

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a heap buffer overflow in the gatts process primary service req function of gatt sr.cc, which could lead to remote code execution without needing additional execution...

Google Pixel 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 for Google Pixel/Nexus devices, which can be...