Export limit exceeded: 387104 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (387104 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-20511 | 2026-09-07 | N/A | ||
| In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890. | ||||
| CVE-2026-86314 | 1 Samsung Open Source | 1 Walrus | 2026-09-07 | 6.2 Medium |
| Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module in which a 32-bit unsigned addition wraps around and bypasses the bounds check. This issue affects Walrus: ff3bf5ff5c4878f8e5572c9593d303f6bc997443. | ||||
| CVE-2026-20517 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781. | ||||
| CVE-2026-86313 | 1 Samsung Open Source | 1 Walrus | 2026-09-07 | 7.8 High |
| Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7. | ||||
| CVE-2026-86270 | 1 Itsourcecode | 1 Sales And Inventory System | 2026-09-07 | 6.3 Medium |
| A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2026-86315 | 2026-09-07 | 6.2 Medium | ||
| An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16_MAX. This issue affects Escargot: 5dc93606abd42b859045add05d704a038e197359. | ||||
| CVE-2026-20506 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126. | ||||
| CVE-2026-20507 | 1 Mediatek | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125. | ||||
| CVE-2026-20512 | 2026-09-07 | N/A | ||
| In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246. | ||||
| CVE-2026-86269 | 1 Itsourcecode | 1 Sales And Inventory System | 2026-09-07 | 6.3 Medium |
| A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. | ||||
| CVE-2026-86268 | 1 Itsourcecode | 1 School Management System | 2026-09-07 | 7.3 High |
| A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. | ||||
| CVE-2026-20509 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011. | ||||
| CVE-2026-20513 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245. | ||||
| CVE-2026-20514 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244. | ||||
| CVE-2026-20515 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132. | ||||
| CVE-2026-20500 | 2026-09-07 | N/A | ||
| In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232. | ||||
| CVE-2026-20501 | 1 Mediatek, Inc. | 1 Mediatek Chipset | 2026-09-07 | N/A |
| In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197. | ||||
| CVE-2026-20502 | 2026-09-07 | N/A | ||
| In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196. | ||||
| CVE-2026-20503 | 2026-09-07 | N/A | ||
| In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020. | ||||
| CVE-2026-20516 | 2026-09-07 | N/A | ||
| In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11060069 / DTV04881615; Issue ID: MSV-7882. | ||||