PT-2026-4693

Name of the Vulnerable Software and Affected Versions CompanionDeviceManagerService.java affected versions not specified Description A logic error in the onStart function of CompanionDeviceManagerService.java may allow for a confused deputy condition. This could result in local escalation of...

PT-2026-4715

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions within ubsan throwing runtime.cpp. This flaw allows a remote attacker to cause a system crash, resulting in a denial of service without...

PT-2026-4707

Name of the Vulnerable Software and Affected Versions ManagedServices affected versions not specified Description An issue exists in the setPackageOrComponentEnabled function of ManagedServices.java related to improper input validation. This can result in a notification policy desync, potentially...

PT-2026-4705

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0025 Description A permissions bypass exists in the hasImage function of Notification.java, potentially allowing information disclosure across users. This could lead to local escalation of privilege without requiring...

CVE-2025-10254

A vulnerability was found in Ascensio System SIA OnlyOffice up to 12.7.0. This issue affects some unknown processing of the file /Products/Projects/Messages.aspx of the component SVG Image Handler. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The...