CVE-2026-75734 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75733 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75731 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75730 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75729 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75727 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75726 - Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result

CVE-2026-75725 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75724 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75722 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75720 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75719 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75718 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75717 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75716 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75715 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75714 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75713 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75712 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75711 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75710 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75709 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75708 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75707 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75706 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75705 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75704 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75702 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75701 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75700 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75696 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75695 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75694 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75693 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75692 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75691 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75690 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75687 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75685 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75683 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75681 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75680 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75679 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75678 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75677 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75675 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75674 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75672 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75671 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75670 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75669 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75668 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75667 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75666 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75661 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75660 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75659 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75657 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75652 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75651 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75647 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75646 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75644 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75643 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75642 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-75640 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75639 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75637 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75636 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75635 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-75631 - Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-75629 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-72627 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-72626 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-71565 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-71440 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-71388 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-71357 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-71356 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-52486 - An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify funct

CVE-2026-49883 - In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive devi

CVE-2026-48273 - ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('E

CVE-2026-28659 - In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permissio

CVE-2026-27227 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-19872 - HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value

CVE-2026-19713 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-19644 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-19612 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-19479 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-19232 - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result i

CVE-2025-64868 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64866 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64854 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64838 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64830 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64618 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64610 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64589 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64588 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64584 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2025-64542 - Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att

CVE-2026-86804 - A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects

CVE-2026-86716 - A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_c

CVE-2026-86675 - A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unkno

CVE-2026-86674 - A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e2

CVE-2026-86477 - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in

CVE-2026-85384 - A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to impr

CVE-2026-82537 - Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execu

CVE-2026-82536 - Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing l

CVE-2026-82004 - Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a

CVE-2026-79721 - Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling

CVE-2026-77774 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi

CVE-2026-77111 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi

CVE-2026-77110 - Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path

CVE-2026-77109 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privileg

CVE-2026-77108 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privileg

CVE-2026-76202 - Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privileg

CVE-2026-76201 - Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-76200 - Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused

CVE-2026-69646 - Improper verification of cryptographic signature in Skype for Business allows an unauthorized attack

CVE-2026-69642 - Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Bu

CVE-2026-66308 - Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a networ

CVE-2026-66307 - Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny

CVE-2026-66306 - Generation of error message containing sensitive information in Skype for Business allows an unautho

CVE-2026-66305 - Use of client-side authentication in Skype for Business allows an authorized attacker to perform spo

CVE-2026-66304 - Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose

CVE-2026-66303 - Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a

CVE-2026-66302 - External control of file name or path in Skype for Business allows an unauthorized attacker to execu

CVE-2026-63523 - Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Bu

CVE-2026-58941 - In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input

CVE-2026-58874 - In multiple functions of SmsController.java, there is a possible escalation of privilege due to a mi

CVE-2026-58848 - In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race c

CVE-2026-58846 - In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check

CVE-2026-58839 - In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow

CVE-2026-58823 - In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missi

CVE-2026-58822 - In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting

CVE-2026-58820 - In multiple locations, there is a possible memory safety issue due to integer overflow. This could l

CVE-2026-55294 - In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap

CVE-2026-55290 - In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds c

CVE-2026-55285 - In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bo

CVE-2026-55277 - In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to

CVE-2026-55273 - In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improp

CVE-2026-55256 - In parsePartHeaders of multiple files, there is a possible persistent denial of service due to impro

CVE-2026-49932 - In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflo

CVE-2026-49927 - In multiple locations, there is a possible out of bounds write due to an integer overflow. This coul

CVE-2026-49921 - In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This c

CVE-2026-49919 - In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer

CVE-2026-49918 - In multiple functions, there is a possible out of bounds write due to an integer overflow. This coul

CVE-2026-49895 - In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read du

CVE-2026-49887 - In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized

CVE-2026-49884 - In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect b

CVE-2026-49882 - In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer

CVE-2026-49881 - In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to

CVE-2026-49879 - In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overfl

CVE-2026-45531 - In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.

CVE-2026-45528 - In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere ch

CVE-2026-45527 - In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary

CVE-2026-45525 - In multiple locations, there is a possible improper data sanitization due to a logic error in the co

CVE-2026-45521 - In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permi

CVE-2026-45520 - In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confu

CVE-2026-45519 - In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized

CVE-2026-45515 - In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of

CVE-2026-28671 - In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race

CVE-2026-28668 - In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the

CVE-2026-28666 - In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Se

CVE-2026-28664 - In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in

CVE-2026-28663 - In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activi

CVE-2026-28662 - In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a

CVE-2026-28660 - In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the

CVE-2026-28658 - In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the co

CVE-2026-28657 - In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permi

CVE-2026-28656 - In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjack

CVE-2026-28655 - In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due

CVE-2026-28653 - In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overfl

CVE-2026-28652 - In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permissi

CVE-2026-28650 - In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic er

CVE-2026-28644 - In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypa

CVE-2026-28642 - In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a l

CVE-2026-28639 - In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error

CVE-2026-28638 - In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a

CVE-2026-28636 - In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" securi

CVE-2026-28634 - In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request w

CVE-2026-28633 - In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denia

CVE-2026-28631 - In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a ta

CVE-2026-28630 - In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/over

CVE-2026-28627 - In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error i

CVE-2026-28626 - In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity d

CVE-2026-28624 - In multiple locations, there is a possible read/write access to files without the proper permissions

CVE-2026-28623 - In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth

CVE-2026-28622 - In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metad

CVE-2026-28620 - In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This

CVE-2026-28618 - In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This coul

CVE-2026-28617 - In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exh

CVE-2026-28616 - In Setup Wizard, there is a possible way to force connection to a malicious network due to confused

CVE-2026-28614 - In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused

CVE-2026-28613 - In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due

CVE-2026-28612 - In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection at

CVE-2026-28611 - In multiple functions of NfcService.java, there is a possible silent payment session hijacking enabl

CVE-2026-28609 - In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. T

CVE-2026-28607 - In multiple functions in multiple locations, there is a possible background activity launch bypass d

CVE-2026-28606 - In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a l

CVE-2026-28604 - In multiple locations, there is a possible use after free due to a race condition. This could lead t

CVE-2026-28603 - In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write a

CVE-2026-28602 - In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-

CVE-2026-28600 - In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due

CVE-2026-28599 - In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due

CVE-2026-28596 - In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of serv

CVE-2026-28594 - In multiple locations, there is a possible use after free due to a logic error in the code. This cou

CVE-2026-28593 - In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleadi

CVE-2026-28590 - In multiple locations, there is a possible improper encryption key validation due to a logic error i

CVE-2026-28584 - In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS

CVE-2026-28583 - In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write

CVE-2026-28582 - In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and

CVE-2026-28572 - In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attac

CVE-2026-0084 - In multiple functions of HostEmulationManager.java, there is a possible background activity launch d

CVE-2026-0065 - In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible

CVE-2026-0054 - In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet inf

CVE-2026-9216 - An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a netw

CVE-2026-9215 - A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker wh

CVE-2026-86673 - A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca5

CVE-2026-86672 - A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca5

CVE-2026-86670 - A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the

CVE-2026-86669 - A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login

CVE-2026-86074 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI cred

CVE-2026-85880 - Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges local

CVE-2026-85877 - Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to ex

CVE-2026-85875 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information

CVE-2026-85360 - Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-84003 - Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allow

CVE-2026-84001 - Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny servic

CVE-2026-84000 - Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute

CVE-2026-83999 - Improper link resolution before file access ('link following') in Windows Resilient File System (ReF

CVE-2026-83998 - Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code

CVE-2026-83997 - Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net

CVE-2026-83996 - Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi

CVE-2026-83995 - Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local

CVE-2026-83992 - Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c

CVE-2026-83991 - Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an aut

CVE-2026-83990 - Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate

CVE-2026-83989 - Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to

CVE-2026-83988 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83987 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83986 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83985 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83983 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83982 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83981 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83980 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri

CVE-2026-83979 - Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges loca

CVE-2026-83978 - Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri