Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-59003 | medium | 4.0 | No | In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check.... | 2026-11-03 |
| CVE-2026-58988 | medium | 4.0 | No | In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information... | 2026-11-03 |
| CVE-2026-58985 | medium | 6.2 | No | In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to... | 2026-11-03 |
| CVE-2026-58955 | medium | 6.2 | No | In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This coul... | 2026-11-03 |
| CVE-2026-58937 | medium | 6.2 | No | In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of... | 2026-11-03 |
| CVE-2026-58933 | medium | 5.3 | No | In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote informati... | 2026-11-03 |
| CVE-2026-58915 | medium | 6.1 | No | A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notific... | 2026-11-03 |
| CVE-2026-58877 | medium | 4.0 | No | In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead... | 2026-11-03 |
| CVE-2026-58875 | medium | 6.2 | No | In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service wi... | 2026-11-03 |
| CVE-2026-58821 | medium | 6.2 | No | In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could l... | 2026-11-03 |
| CVE-2026-58817 | medium | 6.2 | No | In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation.... | 2026-11-03 |
| CVE-2026-55272 | medium | 6.2 | No | In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local... | 2026-11-03 |
| CVE-2026-28531 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-03 |
| CVE-2026-55264 | medium | 4.0 | No | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead... | 2026-11-03 |
| CVE-2026-49935 | medium | 4.0 | No | In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could... | 2026-11-03 |
| CVE-2026-49924 | medium | 6.2 | No | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. T... | 2026-11-03 |
| CVE-2026-28643 | medium | 6.2 | No | In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service w... | 2026-11-03 |
| CVE-2026-121580 | not reported | — | No | Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-pr... | 2026-11-03 |
| CVE-2026-121517 | medium | 5.0 | No | A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality of the component TIF... | 2026-11-03 |
| CVE-2026-121502 | high | 7.3 | No | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file facultyde... | 2026-11-03 |