Multiple Mozilla product logic processing errors (CNVD-2026-26387)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have vulnerabilities related to...

Google Android Permission Licensing and Access Control Vulnerabilities (CNVD-2026-26369)

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to gain local privileges...

Multiple Mozilla product logic processing errors (CNVD-2026-26386)

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have vulnerabilities related to...

Google Android Processing Logic Vulnerability

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a processing logic vulnerability in Google Android, and attackers can exploit this vulnerability to cause remote information leaks. User interaction is required to utilize this vulnerability...

Dell EMC VxRail Appliance permission licensing and access control issue vulnerabilities

The Dell EMC VxRail Appliance is an integrated hypervisor-enabled hyper-converged infrastructure device developed by the American company Dell. Versions of the Dell EMC VxRail Appliance prior to 7.0.520 contain security vulnerabilities. Attackers can exploit these vulnerabilities to escape from...

Google Android SQL Injection Vulnerability (CNVD-2026-29386)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has a SQL injection vulnerability. This vulnerability stems from the lack of validation for SQL statements submitted from external inputs by the Contacts Provider. Attackers can exploit this...

Google Android resource management error vulnerability (CNVD-2026-29390)

Google Android is an operating system based on Linux, open-sourced by Google Inc. There is a resource management vulnerability in Google Android. This vulnerability stems from confusion in the instructions for releasing memory in multiple functions of vpuioctl.c. Attackers can exploit this...

Google Android Authorization Vulnerability (CNVD-2026-26392)

Google Android is an operating system based on Linux, open-sourced by the American company Google. Google Android has authorization-related vulnerabilities; these vulnerabilities stem from the lack of permission checks. Attackers can exploit these vulnerabilities to gain higher levels of access...

Rockwell Automation FactoryTalk Analytics PavilionX Authorization Issues Vulnerability

Rockwell Automation FactoryTalk Analytics PavilionX is an industrial automation analysis platform developed by the Rockwell Automation Foundation in the United States. There is a vulnerability related to authorization in Rockwell Automation FactoryTalk Analytics PavilionX. This vulnerability stem...

Apple Safari WebKit stack overflow vulnerability

Apple Safari is a cross-platform web browser product developed by Apple. It primarily provides functions for rendering and browsing web content. Apple Safari has a stack overflow vulnerability, which stems from an inability to properly validate input data. Attackers can exploit this vulnerability...

Dell PowerFlex Manager permission and access control vulnerabilities

Dell PowerFlex Manager is a software-defined storage management platform developed by the American company Dell. Dell PowerFlex has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, and attackers can exploit the...

Google Android Permission Elevation Vulnerability (CNVD-2026-29393)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a privilege escalation vulnerability. This vulnerability stems from the confusion in the instructions for releasing memory in the lwisdeviceexternaleventemit function found i...

OpenBSD input validation error vulnerability

OpenBSD is an open-source, cross-platform BSD-based UNIX-like operating system developed by the OpenBSD Foundation in Canada. Versions of OpenBSD prior to 076e2b1 contained a vulnerability related to input validation errors. This vulnerability stemmed from the fact that the length value in the...

Dell PowerStore cross-site scripting vulnerability (CNVD-2026-26084)

Dell PowerStore is an enterprise-level network storage system developed by the American company Dell. Dell PowerStore has a cross-site scripting vulnerability. This vulnerability stems from the lack of effective filtering and escaping of data provided by users in the PowerStore Manager. Attackers...

Rockwell Automation CompactLogix 5370 suffers a denial-of-service vulnerability

Rockwell Automation CompactLogix 5370 is a programmable automation controller developed by Rockwell Automation in the United States. The CompactLogix 5370 has a denial-of-service vulnerability, which stems from the lack of verification of sequence numbers and source IP addresses in the CIP...

Apple Safari path traversal vulnerability (CNVD-2026-26335)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It supports web browsing and rendering functions. Apple Safari has a path traversal vulnerability, which stems from an inability to correctly verify file paths. Attackers can exploit this...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26885)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Apple Safari resource management error vulnerability (CNVD-2026-28246)

Apple Safari is a web browser developed by Apple Inc., primarily providing features for web browsing, content rendering, and network functions integrated with the operating system. There is a resource management vulnerability in Apple Safari. This vulnerability stems from improper memory manageme...

Apple Safari resource management error vulnerability (CNVD-2026-28245)

Apple Safari is a web browser designed for the Apple operating system. Apple Safari has a resource management vulnerability, which stems from improper memory management leading to incorrect memory references. Attackers can exploit this vulnerability by processing maliciously crafted web content,...

Apple Safari buffer overflow vulnerability (CNVD-2026-26364)

Safari is a web browser developed by Apple Inc., whose main function is to browse web content. Apple Safari has security vulnerabilities; these vulnerabilities arise due to improper handling of maliciously constructed web content. Attackers can exploit these vulnerabilities to cause memory...

Apple Safari resource management error vulnerability (CNVD-2026-28248)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for browsing web pages and processing web content. There is a resource management vulnerability in Apple Safari. The cause of this vulnerability is the improper handling of...

Dell Peripheral Manager permissions and access control vulnerabilities (CNVD-2026-26537)

Dell Peripheral Manager is a peripheral device management software developed by the American company Dell. Versions of Dell Peripheral Manager prior to 1.7.3 contained security vulnerabilities. Attackers could exploit these vulnerabilities to execute arbitrary code by preloading malicious DLLs...

Multiple Mozilla products have vulnerabilities due to improper exception handling.

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla products have vulnerabilities related to incorrect processing logic.

Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. Several Mozilla products have vulnerabilities related to...

Google Android Buffer Overflow Vulnerability (CNVD-2026-29392)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a buffer overflow vulnerability, which stems from the lack of boundary checks in the lwisiobuffer.c function. Attackers can exploit this vulnerability to gain local privilege...

Google Android Buffer Overflow Vulnerability (CNVD-2026-29391)

Google Android is an operating system based on Linux, open-sourced by Google Inc. in the United States. Google Android has a buffer overflow vulnerability, which stems from the lack of boundary checks in the RTCP packet decoder. Attackers can exploit this vulnerability to cause remote information...

Multiple Mozilla products have buffer overflow vulnerabilities (CNVD-2026-26883)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Multiple Mozilla product logic processing errors (CNVD-2026-26878)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

TP-Link TL-WR841N Web interface stack buffer overflow vulnerability

The TP-Link TL-WR841N v14 is a wireless router produced by the Chinese company TP-Link. The TP-Link TL-WR841N v14 has a stack buffer overflow vulnerability in its web interface. This vulnerability arises from improper handling of specially crafted HTTP requests, leading to a buffer overflow...

Google Android competition conditions issue vulnerability (CNVD-2026-29387)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has vulnerabilities that can lead to local privilege escalation when exploited by attackers...

Google Android Authorization Vulnerability (CNVD-2026-29388)

Google Android is an open-source operating system based on Linux, developed by Google Inc. Google Android has vulnerabilities related to permissions. These vulnerabilities stem from a lack of permission checks in the MmsSmsProvider.java file. Attackers can exploit these vulnerabilities to cause...

Dell PowerFlex Manager Access Control Vulnerability (CNVD-2026-26083)

Dell PowerFlex Manager is an open-source software-defined storage management platform developed by the American company Dell. Dell PowerFlex Manager has a vulnerability related to access control. This vulnerability stems from improper access control mechanisms, allowing attackers to exploit it to...

Apple Safari resource management error vulnerability (CNVD-2026-26365)

Apple Safari is a web browser developed by Apple Inc. It serves as the default browser for iOS, iPadOS, and macOS systems. It supports web browsing, extended features, and synchronization across multiple platforms. There is a resource management vulnerability in Apple Safari. This vulnerability...

Apple Safari resource management error vulnerability (CNVD-2026-28247)

Apple Safari is a web browser developed by Apple Inc., primarily offering core functions such as web browsing, multi-tab management, and privacy protection. Apple Safari has a resource management vulnerability that allows for memory corruption due to improper handling of maliciously constructed w...

Apple Safari buffer overflow vulnerability (CNVD-2026-26435)

Apple Safari is the default web browser integrated in iOS, iPadOS, and macOS systems, used for browsing internet content on Apple devices. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from improper handling of maliciously crafted web content. Attackers can exploit th...

Apple Safari buffer overflow vulnerability (CNVD-2026-26339)

Apple Safari is a web browser developed by Apple Inc. It primarily runs on iOS, iPadOS, and macOS operating systems, used to display web page content. Apple Safari has a security vulnerability. This vulnerability stems from improper handling of maliciously crafted web content, resulting in memory...

Apple Safari resource management error vulnerability (CNVD-2026-28249)

Apple Safari is a web browser developed by Apple Inc., primarily designed for browsing web pages and accessing internet content. Apple Safari has a resource management vulnerability, which stems from an issue where memory is not properly managed when processing malicious web content. Attackers ca...

Apple Safari resource management error vulnerability (CNVD-2026-28251)

Apple Safari is a web browser used primarily for accessing and browsing web content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit this vulnerability to cause memory...

Apple Safari buffer overflow vulnerability (CNVD-2026-26434)

Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. It provides web browsing functionality. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from insufficient validation of boundary checks. Attackers can exploit this...

Dell PowerFlex Manager encryption vulnerability (CNVD-2026-26082)

Dell PowerFlex Manager is a software-defined storage management platform developed by the American company Dell. Versions of Dell PowerFlex Manager prior to 4.5.1.1 contained security vulnerabilities. Attackers could exploit these vulnerabilities to carry out man-in-the-middle attacks using DNS...

Apple Safari permissions vulnerability (CNVD-2026-26338)

Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for accessing and browsing web content. Apple Safari has a permissions vulnerability. This vulnerability stems from improper handling of permissions restrictions during...

Multiple Mozilla product logic processing errors (CNVD-2026-26881)

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox ESR is an extended support version of Firefox the web browser developed by the Mozilla Foundation. Mozilla Thunderbird is an email client software independently developed from t...

Dell Peripheral Manager permissions and access control vulnerabilities

Dell Peripheral Manager is a peripheral device management software developed by the American company Dell. There are security vulnerabilities in Dell Peripheral Manager. Attackers can exploit these vulnerabilities to execute arbitrary code by preloading malicious executable files...

Apple Safari resource management error vulnerability (CNVD-2026-28252)

Apple Safari is a web browser developed by Apple Inc., primarily used for browsing web content. Apple Safari has a resource management vulnerability. This vulnerability stems from improper memory management during the processing of web content, leading to memory-related errors and references...

Apple Safari WebKit memory corruption vulnerability (CNVD-2026-26340)

Apple Safari is a web browser developed by Apple Inc., utilizing the WebKit rendering engine. It primarily serves the function of browsing web pages. Apple Safari has a memory corruption vulnerability. This vulnerability stems from the failure to properly manage memory when processing maliciously...

Cisco Webex App input validation vulnerability (CNVD-2026-26204)

The Cisco Webex App is a video conferencing and collaboration software developed by Cisco, Inc. in the United States. The Cisco Webex App has a vulnerability related to input validation. This vulnerability stems from improper input validation of URL parameters in HTTP requests. Attackers can...

Tenda jd12l stack buffer overflow vulnerability (CNVD-2026-32970)

The Tenda jd12l is a multi-antenna wireless router designed for home users. The Tenda jd12l has a stack buffer overflow vulnerability, which stems from the improper handling of the formSetPPTPServer function in the /goform/SetPptpServerCfg file. Attackers can exploit this vulnerability to launch...

Tenda jd12l stack buffer overflow vulnerability (CNVD-2026-32969)

The Tenda jd12l is a multi-antenna wireless router designed for home users. The Tenda jd12l has a stack buffer overflow vulnerability, which stems from the improper handling of the parameter shareSpeed in the fromSetWifiGusetBasic function within the /goform/WifiGuestSet file. Attackers can explo...

OpenBSD Resource Management Vulnerability (CNVD-2026-26371)

OpenBSD is a Unix-like operating system that focuses on security and code quality. There is a resource management vulnerability in OpenBSD. This vulnerability stems from the use of the syssem.get function in sys/kern/sysvsem.c, where a memory error occurs due to a context switch after tsleep. An...

Linux Kernel Memory Vulnerability (CNVD-2026-26372)

The Linux kernel is the core of the Linux operating system, responsible for managing system resources, process scheduling, file systems, and other functions. The Linux kernel has a memory corruption vulnerability. This vulnerability arises due to the btrfs module releasing dirty page IO trees...