CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 23:34 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58695 | AN Android Google | 7.8 | Sep 15 | In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check |
| CVE-2026-58691 | AN Android Google | 8.4 | Sep 15 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation |
| CVE-2026-58683 | AN Android Google | 8.8 | Sep 15 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation |
| CVE-2026-58679 | AN Android Google | 8.4 | Sep 15 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code |
| CVE-2026-58678 | AN Android Google | 7.8 | Sep 15 | In Bootloader, there is a possible permission bypass due to a logic error in the code |
| CVE-2026-57014 | AN Android Google | 7.8 | Sep 15 | In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-57012 | AN Android Google | 8.4 | Sep 15 | In the Setup Wizard, there is a possible remote package install due to a missing permission check |
| CVE-2026-57008 | AN Android Google | 7.5 | Sep 15 | In Modem, there is a possible information disclosure due to improper input validation |
| CVE-2026-56997 | AN Android Google | 8.8 | Sep 15 | In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-56986 | AN Android Google | 8.4 | Sep 15 | In multiple files, there is a possible out-of-bounds read due to type confusion |
| CVE-2026-56985 | AN Android Google | 8.4 | Sep 15 | In multiple files, there is a possible way to obtain signatures due to type confusion |
| CVE-2026-56982 | AN Android Google | 7.8 | Sep 15 | In VPU, there is a possible permission bypass due to a missing permission check |
| CVE-2026-56978 | AN Android Google | 8.4 | Sep 15 | In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check |
| CVE-2026-56974 | AN Android Google | 8.8 | Sep 15 | In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation |
| CVE-2026-56970 | AN Android Google | 8.4 | Sep 15 | In multiple locations, there is a possible permission bypass due to a missing permission check |
| CVE-2026-56967 | AN Android Google | 8.0 | Sep 15 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow |
| CVE-2026-56945 | AN Android Google | 7.8 | Sep 15 | In VPU, there is a possible out-of-bounds write due to a confused deputy |
| CVE-2026-56942 | AN Android Google | 8.8 | Sep 15 | In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-56941 | AN Android Google | 8.4 | Sep 15 | In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code |
| CVE-2026-56920 | AN Android Google | 8.8 | Sep 15 | In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code |
| CVE-2026-56914 | AN Android Google | 8.4 | Sep 15 | In multiple locations, there is a possible use-after-free due to improper locking |
| CVE-2026-56882 | AN Android Google | 8.8 | Sep 15 | In Cellular Modem, there is a possible information disclosure due to a logic error in the code |
| CVE-2026-56881 | AN Android Google | 8.4 | Sep 15 | In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code |
| CVE-2026-55359 | AN Android Google | 7.8 | Sep 15 | In multiple locations, there is a possible permission bypass due to a logic error in the code |
| CVE-2026-55351 | AN Android Google | 7.8 | Sep 15 | In VPU, there is a possible out-of-bounds write due to an integer overflow |
| CVE-2026-55343 | AN Android Google | 8.0 | Sep 15 | In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-55331 | AN Android Google | 8.8 | Sep 15 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check |
| CVE-2026-55323 | AN Android Google | 7.8 | Sep 15 | In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow |
| CVE-2026-55318 | AN Android Google | 8.8 | Sep 15 | In multiple locations, there is a possible use-after-free due to a race condition |
| CVE-2026-55306 | AN Android Google | 7.5 | Sep 15 | In Cellular Modem, there is a possible denial of service due to improper input validation |
| CVE-2026-55301 | AN Android Google | 8.4 | Sep 15 | In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-0200 | AN Android Google | 8.8 | Sep 15 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow |
| CVE-2026-0199 | AN Android Google | 7.8 | Sep 15 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation |
| CVE-2026-0194 | AN Android Google | 8.4 | Sep 15 | In multiple locations, there is a possible permission bypass due to an integer overflow |
| CVE-2026-0189 | AN Android Google | 8.4 | Sep 15 | In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code |
| CVE-2026-0171 | AN Android Google | 8.8 | Sep 15 | In multiple locations, there is a possible out-of-bounds write due to a logic error in the code |
| CVE-2026-0170 | AN Android Google | 8.8 | Sep 15 | In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-0159 | AN Android Google | 8.8 | Sep 15 | In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check |
| CVE-2026-92176 | PA PDF Architect pdfforge | 7.8 | Sep 15 | pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability |
| CVE-2026-92177 | PA PDF Architect pdfforge | 7.8 | Sep 15 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-92178 | PA PDF Architect pdfforge | 7.8 | Sep 15 | pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability |
| CVE-2026-92179 | PA PDF Architect pdfforge | 7.8 | Sep 15 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-92180 | PA PDF Architect pdfforge | 7.8 | Sep 15 | pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability |
| CVE-2026-19781 | CO Cobalt Ashlar-Vellum | 7.8 | Sep 15 | Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-19886 | OV Origin Viewer OriginLab | 7.8 | Sep 15 | OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability |
| CVE-2026-19885 | OV Origin Viewer OriginLab | 7.8 | Sep 15 | OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2026-19774 | BL BlueZ BlueZ | 7.1 | Sep 15 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2026-85234 | RH Red Hat Enterprise Linux 10 Red Hat | 7.5 | Sep 15 | Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine |
| CVE-2026-81899 | CC Concrete CMS Concrete CMS | 7.3 | Sep 15 | Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard |
| CVE-2026-57441 | MC mcpvault bitbonsai | 8.4 | Sep 15 | MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence |