Aggregator

A vulnerability classified as problematic has been found in Google Android. This impacts an unknown function. The manipulation leads to uninitialized pointer. This vulnerability is documented as CVE-2026-58721. The attack needs to be performed locally. There is not any exploit available. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in Google Android. It has been declared as very critical. This vulnerability affects the function ap_pmic_poll_msg_handler of the file ap_pmic_ipc.c. The manipulation results in permission issues. This vulnerability is known as CVE-2026-58698. Attacking locally is a requirement. No exploit is available. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in Google Android. It has been rated as very critical. This issue affects the function Vp9DecEndOfStream of the file vp9hwd_output.cc. This manipulation causes out-of-bounds read. This vulnerability is handled as CVE-2026-58699. The attack can be initiated remotely. There is not any exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability categorized as critical has been discovered in Google Kernel. Impacted is the function trusty_dputc of the file generic-arm64-smcall.c of the component Trusty. Such manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2026-58701. Local access is required to approach this attack. No exploit exists. Applying a patch is advised to resolve this issue.

A vulnerability identified as very critical has been detected in Google Android. The affected element is an unknown function. Performing a manipulation results in race condition. This vulnerability was named CVE-2026-58716. The attack needs to be approached locally. There is no available exploit. It is suggested to install a patch to address this issue.

A vulnerability labeled as very critical has been found in Google Android. The impacted element is the function smmu_detach_dev_nested of the file arm-smmu-v3.c of the component arm-smmu-v3. Executing a manipulation can lead to improper input validation. The identification of this vulnerability is CVE-2026-58718. The attack can only be executed locally. There is no exploit available. A patch should be applied to remediate this issue.

A vulnerability was found in Google Android. It has been classified as problematic. Impacted is an unknown function of the file physmem_extmem_linux.c of the component physmem_extmem. This manipulation causes out-of-bounds read. This vulnerability appears as CVE-2026-58731. The attack requires local access. There is no available exploit. To fix this issue, it is recommended to deploy a patch.

A vulnerability was found in Google Android. It has been declared as very critical. The affected element is the function google_mba_recv_msg of the file google_mba_poll.c of the component google_mba. Such manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2026-58734. An attack has to be approached locally. There is no exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability was found in Google Android. It has been rated as very critical. The impacted element is an unknown function. Performing a manipulation results in use after free. This vulnerability is known as CVE-2026-58724. Attacking locally is a requirement. No exploit is available. Applying a patch is the recommended action to fix this issue.

A vulnerability identified as very critical has been detected in Google Android. This impacts the function FsmReleaseKey of the file fsm.c. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2026-58726. Local access is required to approach this attack. No exploit exists. It is recommended to apply a patch to fix this issue.

A vulnerability labeled as very critical has been found in Google Android. Affected is the function platform_msg_handler_init of the file default_msg_handlers.c. The manipulation results in improper check for dropped privileges. This vulnerability was named CVE-2026-58739. The attack needs to be approached locally. There is no available exploit. Applying a patch is advised to resolve this issue.

A vulnerability marked as very critical has been reported in Google Android. Affected by this vulnerability is the function ARM64_TLBI of the file mmu.h of the component ARM64 MMU. This manipulation causes race condition. The identification of this vulnerability is CVE-2026-58728. The attack can only be executed locally. There is no exploit available. It is suggested to install a patch to address this issue.

New releaseSep 21, 2026Real-time network diagnostics in your terminal. One command, zero config, ins

A vulnerability categorized as problematic has been discovered in OrdaSoft Gallery Extension up to 6.2.6. The impacted element is the function saveWatermark of the component Upload Handler. Executing a manipulation can lead to unrestricted upload. This vulnerability is tracked as CVE-2026-88857. The attack can be launched remotely. No exploit exists.

Currently trending CVE - Hype Score: 1 - A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

Currently trending CVE - Hype Score: 10 - IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

Currently trending CVE - Hype Score: 10 - An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks.

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header(). Device header callbacks are allowed to reallocate the skb head, ...

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request from another port to ...

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP ...