CVEs
Browse the synced catalog, newest first.
- CVE-2026-55362In multiple files, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-55360In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel encryption due to…Google Android
- CVE-2026-55348In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a…Google Android
- CVE-2026-55346In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds…Google Android
- CVE-2026-55344In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code.Google Android
- CVE-2026-55335In multiple locations, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-55321In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-55319In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to memory corruption.Google Android
- CVE-2026-55316In handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-55312In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due to a non-heap…Google Android
- CVE-2026-55311In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-55309In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault injection due to a…Google Android
- CVE-2026-55297In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared memory…Google Android
- CVE-2026-14447In ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds physical address via an off-by-one check due to…Google Android
- CVE-2026-0195In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error.Google Android
- CVE-2026-0193In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch.Google Android
- CVE-2026-0191In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-0178In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries…Google Android
- CVE-2026-0175In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error.Google Android
- CVE-2026-0169In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code.Google Android
- CVE-2026-50080Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-40273Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-40274Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-126136OAuth2 access token could be sent over an unencrypted connection with Exchange accountsMozilla Thunderbird
- CVE-2026-126135SMTP and POP3 response injection when using STARTTLSMozilla Thunderbird
- CVE-2026-126134Feed subscriptions could leak NTLM credentials on WindowsMozilla Thunderbird
- CVE-2026-126133Calendar server credentials could be sent to an HTTP proxyMozilla Thunderbird
- CVE-2026-126132Attachments could be replaced with local file content when forwardingMozilla Thunderbird
- CVE-2026-40275Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-125336Forge: X.509 nameConstraints not enforced by verifyCertificateChain()digitalbazaar forge