CVE-2026-48438

CVE-2026-48438 affects CAI Content Credentials. A NULL pointer dereference can crash the application, causing denial-of-service. Exploitation is remote with no user interaction (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; base score 7.5). No fix/version details are provided in the documents.

CVE-2026-71390

CAI Content Credentials is affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features and grant unauthorized limited write access. CVE-2026-71390; impact details: local attacker, no user interaction required, with a base CVSSv3.1 score of 4.0 (Medium). Exp...

CVE-2026-48444

CVE-2026-48444 affects CAI Content Credentials and is described as an Integer Overflow/Wraparound vulnerability that could cause an application denial-of-service. The issue could be triggered locally without user interaction and may crash the application (impact: Availability High per the CVSS). ...

CVE-2026-47922

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability leading to potential privilege escalation. The issue requires user interaction (victim must visit a crafted URL or interact with a compromised page) and has a CVSSv3.1 base score of 4.7 (Medium) with attack ...

CVE-2026-48442

CAI Content Credentials is affected by a Path Traversal vulnerability (CVE-2026-48442) that could allow an arbitrary file system read outside restricted directories. The issue arises from an improper limitation of a pathname to a restricted directory. Exploitation does not require user interactio...

CVE-2026-48437

CVE-2026-48437 affects CAI Content Credentials and is due to Improper Certificate Validation, enabling a security feature bypass and unauthorized write access. Exploitation requires user interaction (victim visits a malicious URL or interacts with a compromised page). CVSS 3.1 base score 5.5 (Med...

CVE-2026-48387

CVE-2026-48387 affects CAI Content Credentials and is caused by an integer overflow/wraparound that can crash the application, resulting in a denial-of-service. Exploitation is possible without user interaction and requires local access (per CVSS metrics: AV:L, AC:L, PR:N, UI:N, S:U, A:H). The co...

CVE-2026-48434

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability (CVE-2026-48434) that could exhaust resources and cause application DoS. Exploitation does not require user interaction and is indicated as local with no privileges required; impact is Availability High, wit...

CVE-2026-48439

CVE-2026-48439 affects CAI Content Credentials. It describes an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. An attacker could exhaust system resources via a network-based vector without user interaction. The NVD/CVE records list a CVSS v3.1...

CVE-2026-48443

Technical details about CVE-2026-48443 are not publicly available in the provided documents; monitor for updates from official sources.

CVE-2026-48445

CAI Content Credentials is affected by an Integer Overflow/Wraparound vulnerability (CVE-2026-48445) that could cause an application denial-of-service. According to the sources, exploitation does not require user interaction and the attack vector is local. The CVSS 3.1 data indicates a Medium bas...

CVE-2026-48446

CVE-2026-48446 affects CAI Content Credentials. The issue is an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) that could allow reading arbitrary files on the system outside the intended scope. Exploitation requires user interaction; a victim must visit a malicious U...

CVE-2026-71389

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) that can crash the application and cause a denial-of-service. The issue does not require user interaction and is described as a local attack with no privileges required. The available sources (NVD entries and CVE rec...

CVE-2026-48435

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could crash the application, leading to a denial-of-service. Exploitation does not require user interaction and is reported with a LOCAL attack vector (per the CVSS data). The provided documents do...

CVE-2026-48436

Affected software/area: CAI Content Credentials. Vulnerability type: Improper Input Validation leading to a security feature bypass. Root cause / nature: Input validation flaw could allow bypass of security measures, enabling unauthorized write access. Impact: Security feature bypass with unautho...