CWE-693

In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code

In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User…

CVE-2026-0065High· 7.8

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege…

CVE-2026-28660Low· 3.3

▾ Sunlitgoogle · androidEPSS 0.09%via NVD

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for…

CVE-2026-28658High· 7.8

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e…

CVE-2026-28655High· 7.8

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User inte…

CVE-2026-28650High· 7.8

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…

CVE-2026-28642High· 7.8

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…

CVE-2026-28639High· 7.8

In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code

In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not nee…

CVE-2026-28634High· 7.8

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile…

CVE-2026-28627Medium· 4.3

▾ Sunlitgoogle · androidEPSS 0.27%via NVD

In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code

In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not need…

CVE-2026-49881High· 7.8PoC

▾ Midnightgoogle · androidEPSS 0.10%via NVD

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…

CVE-2026-45521Low· 3.3

▾ Sunlitgoogle · androidEPSS 0.09%via NVD

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…

CVE-2026-28668High· 7.8

In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code

In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

CVE-2026-28664High· 7.8

In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code

In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…

CVE-2026-81376Critical· 9.6

▾ Midnightmicrosoft · visual_studio_codeEPSS 0.90%via NVD

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-77892Medium· 6.8

▾ Sunlitmicrosoft · windows_10_1607EPSS 0.44%via NVD

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-84809Medium· 6.5PoC

▾ TwilightTencent · AI-Infra-GuardEPSS 0.57%via NVD

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can dist…

CVE-2026-84811Medium· 6.5

▾ Sunlitagentverus · agentverus-scannerEPSS 0.52%via NVD

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache__ entries alongside benign source files. Attackers can execu…

CVE-2026-84810Medium· 6.5PoC

▾ Twilightclaude-world · claude-skill-antivirusEPSS 0.48%via NVD

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills w…

CVE-2026-20277High· 8.2

▾ TwilightCisco · Cisco IOS XR SoftwareEPSS 0.41%via NVD

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases tha…

CVE-2026-79686High· 8.8

▾ Twilightdell · powerstoreosEPSS 0.49%via NVD

Dell PowerStore contains a Protection Mechanism Failure vulnerability

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

CVE-2026-79683High· 8.8

▾ Twilightdell · powerstoreosEPSS 0.49%via NVD

Dell PowerStore contains a Protection Mechanism Failure vulnerability

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.

CVE-2026-79684High· 8.8

▾ Twilightdell · powerstoreosEPSS 0.49%via NVD

Dell PowerStore contains a Protection Mechanism Failure vulnerability

CVE-2026-82855Critical· 9.8

▾ Midnighthulumi · policiesEPSS 0.59%via NVD

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attack…

CVE-2026-53508Medium

▾ Sunlitoasdiff · github.com/oasdiff/oasdiffEPSS 0.50%via NVD

oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs

oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-external-refs=false (library: openapi3.Loader.IsExternalRef…

CVE-2026-82474High· 7.8PoC

▾ MidnightRed Hat · Red Hat Enterprise Linux 10EPSS 0.18%via NVD

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve…

CVE-2026-6876None

▾ SunlitEPSS 0.68%via NVD

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform

ServiceNow has remediated a sandbox escape security issue that was identified in the Now Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the Now Platform, potentially leading to more acc…

CVE-2026-61792High· 7.7

▾ TwilightEPSS 0.59%via NVD

Weblate is a web-based continuous localization platform used to manage software translations

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, w…

CVE-2026-80198High· 7.5