Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101185 | medium | 5.9 | No | OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 2026-11-02 |
| CVE-2026-101183 | medium | 5.9 | No | UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101182 | medium | 5.9 | No | Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101181 | medium | 5.5 | No | Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiali... | 2026-11-02 |
| CVE-2026-101180 | medium | 4.3 | No | DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101179 | medium | 4.7 | No | Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101178 | medium | 6.6 | No | Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service co... | 2026-11-02 |
| CVE-2026-101177 | low | 3.7 | No | Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confident... | 2026-11-02 |
| CVE-2026-101176 | high | 7.1 | No | Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affe... | 2026-11-02 |
| CVE-2026-101175 | medium | 4.3 | No | Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101174 | medium | 5.7 | No | DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101173 | medium | 6.5 | No | DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2026-101172 | medium | 6.2 | No | Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. | 2026-11-02 |
| CVE-2026-101171 | low | 3.6 | No | Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect... | 2026-11-02 |
| CVE-2026-101170 | medium | 4.0 | No | DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability. | 2026-11-02 |
| CVE-2025-48600 | medium | 5.5 | No | In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local in... | 2026-11-02 |
| CVE-2025-22442 | high | 7.0 | No | In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created... | 2026-11-02 |
| CVE-2024-7075 | medium | 4.6 | No | The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. This... | 2026-11-02 |
| CVE-2024-5617 | medium | 4.8 | No | The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames exist in... | 2026-11-02 |
| CVE-2014-125138 | high | 8.8 | No | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerab... | 2026-11-02 |