CVE-2026-28622

CVE-2026-28622 affects the Media Provider component in Android's Project Mainline, specifically in getQueryBuilderInternal of MediaProvider.java. A permissions bypass allows retrieval of location metadata , resulting in local information disclosure with no additional execution privileges or user ...

CVE-2026-28620

CVE-2026-28620 is a permissions bypass in multiple locations that allows unauthorized URI access , leading to local escalation of privilege with no additional execution privileges required and no user interaction. The vulnerability is tracked in the Android Security Bulletin (2026-09-01) and the ...

CVE-2026-28618

CVE-2026-28618 is a heap buffer overflow (OOB write) in the dec_frm_prepare function of oapv.c , part of the Android Media Framework . It can lead to remote code execution with no additional privileges and no user interaction required. The vulnerability is rated CVSS 8.8 (High) and classified as ...

CVE-2026-28617

CVE-2026-28617 affects the WiFi subcomponent of Android's Project Mainline, specifically in WifiNetworkSuggestionsManager.java . The root cause is a persistent denial-of-service due to resource exhaustion , enabling a local attacker to degrade device availability without requiring additional priv...

CVE-2026-28616

CVE-2026-28616 is a vulnerability in the Android Setup Wizard component. Due to a confused deputy flaw, a local attacker can force the device to connect to a malicious network, enabling local escalation of privilege without requiring additional execution privileges or user interaction. The CVSS 3...

CVE-2026-28614

CVE-2026-28614 is a confused deputy vulnerability in the onCreate method of SlicePermissionActivity.java on Android, enabling a local escalation of privilege with no additional execution privileges and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high impact to confidentiality, inte...

CVE-2026-28613

CVE-2026-28613 affects Android (per the Android Security Bulletin 2026-09-01 ). The vulnerability resides in the initAppLinkTypeAndIntent function of ChannelImpl.java , where improper input validation allows an arbitrary intent to be launched , leading to local privilege escalation with no additi...

CVE-2026-28612

CVE-2026-28612 is a local escalation of privilege vulnerability in Android's ActivityStarter.java (specifically the resolveActivity method), caused by a logic error that enables Intent Redirection attacks. No additional execution privileges or user interaction are required to exploit it, yielding...

CVE-2026-28611

CVE-2026-28611 is a vulnerability in Android's NfcService.java where a missing permission check in multiple functions enables a silent NFC payment session hijacking , leading to local privilege escalation with no additional execution privileges or user interaction required. The CVSS 3.1 score is ...

CVE-2026-28609

CVE-2026-28609 is an out-of-bounds write vulnerability in MatroskaExtractor.cpp , caused by improper casting during a read operation. It can lead to remote code execution with low privileges required and no user interaction needed, rated CVSS 8.8 (HIGH) . The vulnerability is tracked in the Andro...

CVE-2026-28607

CVE-2026-28607 is a local elevation of privilege vulnerability in the Android Framework component, caused by a background activity launch bypass due to a confused deputy in multiple functions across multiple locations. No additional execution privileges or user interaction are required for exploi...

CVE-2026-28606

CVE-2026-28606 is a logic error in the handleBondStateChanged method of Android's AdapterService.java , which allows an attacker to skip Bluetooth pairing and achieve remote escalation of privilege without user consent, without additional execution privileges, and without user interaction. The CN...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...

CVE-2026-28603

CVE-2026-28603 is a local escalation of privilege vulnerability in the Android system component AppRestrictionsFragment.java, specifically in the assertSafeToStartCustomActivity method. The root cause is a confused deputy flaw that permits read/write access to private files. Exploitation requires...

CVE-2026-28602

CVE-2026-28602 is a logic error in ClipboardService.java (method setClipboardAccessNotificationsEnabledForUser) within the Android Framework component that can break multi-user isolation , leading to local escalation of privilege . No additional execution privileges or user interaction are requir...

CVE-2026-28600

CVE-2026-28600 is a confused deputy vulnerability in the Android payment framework , specifically in the onCreate method of PaymentDefaultDialog.java. An attacker can change the device's default payment app without additional execution privileges or user interaction, enabling a local escalation o...

CVE-2026-28599

CVE-2026-28599 is an Intent Redirection Bypass in the addCreatorToken method of ActivityManagerService.java within the Android Framework component, caused by a logic error . It enables local escalation of privilege with no additional execution privileges and no user interaction required, scored C...

CVE-2026-28596

CVE-2026-28596 is a permanent denial of service vulnerability in the Android Framework component, specifically in the parseInterventionFromXml method of GameManagerService.java. The root cause is resource exhaustion , which can lead to a permanent DoS. Exploitation requires a local attacker with ...

CVE-2026-28594

CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error present in multiple locations. It enables local privilege escalation without requiring additional execution privileges or user interaction, rated CVSS 7.8 (High) . The affected AOSP versio...

CVE-2026-28593

CVE-2026-28593 is a local privilege escalation vulnerability in Android , located in the getItemList method of SettingsFragment.java . The root cause is a user interaction bypass due to misleading or insufficient UI, allowing an attacker with low privileges to escalate without further user intera...

CVE-2026-28590

CVE-2026-28590 is an improper encryption key validation vulnerability in the Android core operating system and Media Framework , caused by a logic error in the code. It enables local privilege escalation with no additional execution privileges required and no user interaction. The vulnerability c...

CVE-2026-28584

CVE-2026-28584 is a local denial-of-service vulnerability in the Android Framework component, specifically in createSessionInternal of PackageInstallerService.java, caused by a logic error that can permanently DoS the device. Exploitation requires only low privileges and no user interaction. The ...

CVE-2026-28583

CVE-2026-28583 is an out-of-bounds write in the validate_camera_metadata_structure function of camera_metadata.c (Android Camera HAL), caused by a logical error. It enables local privilege escalation with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (High) with ...

CVE-2026-28582

CVE-2026-28582 is a missing permission check in the onCreate method of ConfirmDeviceCredentialActivity.java on Android , allowing a local attacker with low privileges (no user interaction required) to read or modify device credentials , resulting in local information disclosure. NVD rates it CVSS...

CVE-2026-28572

CVE-2026-28572 is an elevation of privilege vulnerability in the Android Framework component, specifically in the onCreate method of InstallLaunch.kt. A tapjacking/overlay attack can produce a misleading UI, enabling a local attacker to escalate privileges with no additional execution privileges ...

CVE-2026-0084

CVE-2026-0084 is a local privilege escalation vulnerability in the Android framework , specifically in multiple functions of HostEmulationManager.java. A logic error permits an unintended background activity launch, allowing a local attacker to escalate privileges with no additional execution pri...

CVE-2026-0065

CVE-2026-0065 is a local elevation of privilege vulnerability in the Android Framework component, specifically a logic error in the areBackgroundActivityStartsAllowed method of BackgroundLaunchProcessController.java that permits unintended background activity launches. Exploitation requires User-...

CVE-2026-0054

CVE-2026-0054 is an information disclosure vulnerability in the Android Framework component, specifically in the isCallerAllowed method of WalletContextualLocationsService.kt. A missing permission check allows a local attacker with low privileges to obtain wallet information without user interact...

CVE-2026-86673

ningzichun Student Management System (up to commit 98760f57) is affected by hard-coded database credentials in the mysqli_connect function within config/database.php. The vulnerability allows a remote, unauthenticated attacker to gain access to the system's database connection with low impact on ...

CVE-2026-86672

CVE-2026-86672 affects the ningzichun Student Management System (up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf). The vulnerability resides in the Backup Handler component, specifically in the file example.7z , where an unknown function allows remote, unauthenticated information disclosure...

CVE-2026-81821

CVE-2026-81821 affects AVEVA Pipeline Integrity Monitor (PIMBoards) due to the use of a hard-coded cryptographic key . An attacker with local read access to PIMBoards project files can decrypt and view sensitive information stored within them. The CVSS 3.1 score is 8.4 (HIGH) with changed scope, ...

CVE-2026-81822

CVE-2026-81822 affects AVEVA Pipeline Integrity Monitor (PIMBoards) due to the use of a broken or risky cryptographic algorithm in its app-native password storage. An attacker with read access to PIMBoards project files can computationally brute-force the weak password hashes to recover user cred...

CVE-2026-86074

n8n (open-source workflow automation platform) prior to 2.37.7 and 2.38.2 is affected by a flaw in the Instance AI credential setup flow . The flow accepted a credential test or verification URL without verifying it matched the workflow node's origin, allowing attacker-controlled fetched content ...

CVE-2026-81823

CVE-2026-81823 affects AVEVA Pipeline Integrity Monitor , specifically its PIMBoards component. A missing authorization flaw allows an unauthenticated attacker to perform read operations intended only for PIMBoards users, resulting in information disclosure . Write operations are not impacted. Th...

CVE-2026-81824

CVE-2026-81824 affects AVEVA Pipeline Integrity Monitor (PIMBoards) and is a cross-site scripting (XSS) vulnerability. If exploited, it allows an attacker to execute arbitrary JavaScript code in the browser session of a PIMBoards user who was socially engineered into clicking a malicious link. Th...

CVE-2026-86670

aircheng-org iWebShop-5 versions up to 5.15 contain a vulnerability in the Authentication Storage component within the file controllers/admin.php . Manipulating the Password argument can result in a password hash with insufficient computational effort , effectively weakening credential protection...

CVE-2026-79904

Photoshop Mobile is affected by a Path Traversal (CWE-22) vulnerability caused by improper limitation of a pathname to a restricted directory, which could result in a security feature bypass . A low-privileged attacker could access unauthorized files or directories outside intended restrictions. ...

CVE-2026-76196

Photoshop Mobile is affected by a Session Fixation vulnerability (CWE-384) that could result in privilege escalation , allowing an attacker to gain access to sensitive resources. Exploitation requires user interaction — specifically, a victim must interact with a malicious webpage — and additiona...

CVE-2026-48707

InstantCMS versions prior to 2.18.2 contain a Server-Side Request Forgery (SSRF) vulnerability in the file upload functionality (system/core/uploader.php, lines 509–532). When the "upload from URL" feature follows an HTTP redirect , the redirected target URL bypasses the private IP address blackl...

CVE-2026-62804

CVE-2026-62804 is an external control of file name or path vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally. The flaw requires user interaction (e.g., opening a crafted file) and no prior privileges, with high impact to confidentiality, integrity...

CVE-2026-84003

Microsoft Authentication Library (MSAL) for Node.js is affected by an authentication bypass via capture-replay that allows an unauthorized network attacker to perform spoofing . The underlying cause is the ability to capture and replay authentication tokens, leading to high confidentiality and in...

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

CVE-2026-85875

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) , with a local attack vector, low complexity, no privileges required, and user interaction required. Impact is limited to confidentiality...

CVE-2026-84000

CVE-2026-84000 is a heap-based buffer overflow in Microsoft Graphics Component that allows an authorized attacker to execute code locally. The vulnerability requires local access and low privileges but no user interaction, resulting in high impact to confidentiality, integrity, and availability (...

CVE-2026-69806

CVE-2026-69806 is a .NET Elevation of Privilege vulnerability caused by exposure of sensitive information to an unauthorized actor, which an authorized local attacker can exploit to escalate privileges. The CVSS 3.1 score is 7.0 (HIGH) with the vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicat...

CVE-2026-83995

CVE-2026-83995 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with low attack complexity, low privileges required, and no user interaction needed, resulting in high impac...

CVE-2026-83997

CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...

CVE-2026-83992

CVE-2026-83992 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability with low ...

CVE-2026-83990

CVE-2026-83990 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with a local attack vector, low privileges required, no user interaction, and high impact on confidenti...