Export limit exceeded: 425902 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425902 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425902 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-57048 | 1 Google | 1 Android | 2026-11-15 | 6.7 Medium |
| In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-58684 | 1 Google | 1 Android | 2026-11-15 | 8.4 High |
| In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58702 | 1 Google | 1 Android | 2026-11-15 | 4.0 Medium |
| In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58736 | 1 Google | 1 Android | 2026-11-15 | 9.8 Critical |
| In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response queue due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58769 | 1 Google | 1 Android | 2026-11-15 | 2.3 Low |
| In multiple locations, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58780 | 1 Google | 1 Android | 2026-11-15 | 9.8 Critical |
| In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-107413 | 1 Citrix | 3 Gateway, Netscaler Adc, Netscaler Gateway | 2026-11-15 | N/A |
| Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway. | ||||
| CVE-2026-111341 | 1 Citrix | 3 Gateway, Netscaler Adc, Netscaler Gateway | 2026-11-15 | N/A |
| Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway. | ||||
| CVE-2026-111342 | 1 Citrix | 3 Gateway, Netscaler Adc, Netscaler Gateway | 2026-11-15 | N/A |
| Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway. | ||||
| CVE-2026-124897 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-11-15 | 8.8 High |
| Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7. | ||||
| CVE-2026-95977 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-15 | 5.5 Medium |
| Out-of-bounds read in Windows Event Viewer allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-129351 | 1 Trendnet | 2 Tew-657brm, Tew-657brm Firmware | 2026-11-15 | 10 Critical |
| A security vulnerability has been detected in TRENDnet TEW-657BRM 1.00.1. This vulnerability affects the function sprintf of the file /setup.cgi of the component mini_httpd. Such manipulation leads to out-of-bounds write. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor explains: ""I am not able to confirm if such vulnerability exists as the product has been EOL for more than 15 years. We will send out an announcement letting customers know." This vulnerability only affects products that are no longer supported by the maintainer. | ||||
| CVE-2026-56902 | 1 Google | 1 Android | 2026-11-14 | 4.0 Medium |
| In multiple locations, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-56912 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-56929 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a logic error in the code. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation. | ||||
| CVE-2026-56934 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-56944 | 1 Google | 1 Android | 2026-11-14 | 7.8 High |
| In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use After Free due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58783 | 1 Google | 1 Android | 2026-11-14 | 4.4 Medium |
| In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58796 | 1 Google | 1 Android | 2026-11-14 | 8.4 High |
| In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast receivers due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||||
| CVE-2026-58797 | 1 Google | 1 Android | 2026-11-14 | 3.3 Low |
| In register_dump_dpa of sswrp_pcie.c, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with execution privileges needed. User interaction is for exploitation. | ||||