Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-58975 | high | 8.4 | No | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privile... | 2026-11-04 |
| CVE-2026-58974 | high | 8.4 | No | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privi... | 2026-11-04 |
| CVE-2026-58966 | high | 8.4 | No | In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local esca... | 2026-11-04 |
| CVE-2026-58964 | high | 8.4 | No | In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to loca... | 2026-11-04 |
| CVE-2026-58962 | high | 8.4 | No | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This c... | 2026-11-04 |
| CVE-2026-58956 | high | 8.4 | No | In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escal... | 2026-11-04 |
| CVE-2026-58879 | high | 8.4 | No | In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of pri... | 2026-11-04 |
| CVE-2026-58871 | high | 8.4 | No | In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to lo... | 2026-11-04 |
| CVE-2026-58867 | high | 8.4 | No | In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to loca... | 2026-11-04 |
| CVE-2026-55263 | high | 8.4 | No | In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading o... | 2026-11-04 |
| CVE-2026-55261 | high | 8.4 | No | In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This... | 2026-11-04 |
| CVE-2026-49934 | high | 7.8 | No | In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lea... | 2026-11-04 |
| CVE-2026-28336 | critical | 9.9 | No | SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controll... | 2026-11-04 |
| CVE-2026-28335 | high | 8.4 | No | SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is... | 2026-11-04 |
| CVE-2026-28327 | high | 8.2 | No | SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires acce... | 2026-11-04 |
| CVE-2026-28665 | high | 8.4 | No | In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation.... | 2026-11-04 |
| CVE-2026-20557 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-20556 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-20549 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a... | 2026-11-04 |
| CVE-2026-20548 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has... | 2026-11-04 |