CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-58927The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within…Google Android
- CVE-2026-58926A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer…Google Android
- CVE-2026-58925The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming…Google Android
- CVE-2026-58924The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method.Google Android
- CVE-2026-58915A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up…Google Android
- CVE-2026-49906An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the…Google Android
- CVE-2026-49903The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…Google Android
- CVE-2026-116766Improper input handling in Secure Access serverAbsolute Software Secure Access
- CVE-2026-16305CVE-2026-16305INFINITT Healthcare System Manager
- CVE-2026-91901Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme…Dell Alienware Command Center
- CVE-2026-91896Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability.Dell Alienware Command Center
- CVE-2026-86365Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability.Dell Alienware Command Center
- CVE-2026-116769Authentication bypass in Secure Access ServersAbsolute Security Secure Access
- CVE-2026-91900Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler…Dell Alienware Command Center
- CVE-2026-91899Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature…Dell Alienware Command Center
- CVE-2026-91897Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability.Dell Alienware Command Center
- CVE-2026-97718CSRF in Secure Access Server v14.60Absolute Security Secure Access
- CVE-2026-91894Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability.Dell Alienware Command Center
- CVE-2026-91895Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability.Dell Alienware Command Center
- CVE-2026-59048In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check.Google Android
- CVE-2026-59047In multiple locations, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-59046In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation.Google Android
- CVE-2026-59045In multiple locations, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-59044In multiple locations, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-59043In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition.Google Android
- CVE-2026-59042In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition.Google Android
- CVE-2026-59031In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-59028In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-59022In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-59021In multiple locations, there is a possible denial of service due to improper input validation.Google Android