Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-79977 | high | 8.2 | No | The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handle_tra... | 2026-11-04 |
| CVE-2026-79976 | high | 7.1 | No | The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, where the bus contro... | 2026-11-04 |
| CVE-2026-78117 | medium | 4.2 | No | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet descriptor in a file... | 2026-11-04 |
| CVE-2026-78116 | medium | 5.2 | No | The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work... | 2026-11-04 |
| CVE-2026-77691 | high | 8.1 | No | ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft... | 2026-11-04 |
| CVE-2026-77684 | medium | 5.7 | No | The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are... | 2026-11-04 |
| CVE-2026-76788 | high | 8.8 | No | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a s... | 2026-11-04 |
| CVE-2026-76787 | medium | 5.9 | No | The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgm... | 2026-11-04 |
| CVE-2026-75085 | medium | 4.2 | No | The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx... | 2026-11-04 |
| CVE-2026-75084 | medium | 6.8 | No | The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and va... | 2026-11-04 |
| CVE-2026-75083 | medium | 5.9 | No | The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pk... | 2026-11-04 |
| CVE-2026-67693 | low | 3.7 | No | GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usa... | 2026-11-04 |
| CVE-2026-59005 | high | 8.4 | No | In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to l... | 2026-11-04 |
| CVE-2026-59004 | high | 8.4 | No | In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege... | 2026-11-04 |
| CVE-2026-58995 | high | 8.4 | No | In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escala... | 2026-11-04 |
| CVE-2026-58994 | high | 8.4 | No | In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local... | 2026-11-04 |
| CVE-2026-58977 | medium | 6.7 | No | In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local es... | 2026-11-04 |
| CVE-2026-58989 | high | 8.4 | No | In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lea... | 2026-11-04 |
| CVE-2026-58986 | high | 8.4 | No | In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.... | 2026-11-04 |
| CVE-2026-58979 | high | 8.4 | No | In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to loc... | 2026-11-04 |