Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-55261 | high | 8.4 | No | In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This... | 2026-11-04 |
| CVE-2026-49934 | high | 7.8 | No | In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lea... | 2026-11-04 |
| CVE-2026-28336 | critical | 9.9 | No | SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controll... | 2026-11-04 |
| CVE-2026-28335 | high | 8.4 | No | SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is... | 2026-11-04 |
| CVE-2026-28327 | high | 8.2 | No | SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires acce... | 2026-11-04 |
| CVE-2026-28665 | high | 8.4 | No | In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation.... | 2026-11-04 |
| CVE-2026-20557 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-20556 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-20549 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a... | 2026-11-04 |
| CVE-2026-20548 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has... | 2026-11-04 |
| CVE-2026-20547 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-20545 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-20499 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE... | 2026-11-04 |
| CVE-2026-19940 | medium | 6.5 | No | The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps its struct bt_hfp_ag o... | 2026-11-04 |
| CVE-2026-19939 | medium | 6.3 | No | The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP req... | 2026-11-04 |
| CVE-2026-19742 | low | 3.7 | No | The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers (gen_stable_iid() in subsys/net/ip/ip... | 2026-11-04 |
| CVE-2026-19938 | medium | 5.9 | No | The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c docu... | 2026-11-04 |
| CVE-2026-19937 | medium | 5.7 | No | The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH... | 2026-11-04 |
| CVE-2026-19936 | medium | 4.8 | No | The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, fre... | 2026-11-04 |
| CVE-2026-19935 | high | 7.5 | No | The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded... | 2026-11-04 |