| CVE-2026-28577 | 7.8 | — | — | — | google / android | In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack | 149d ago |
| CVE-2026-0100 | 7.8 | — | — | — | google / android | In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. | 149d ago |
| CVE-2026-0099 | 7.8 | — | — | — | google / android | In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background du | 149d ago |
| CVE-2026-0098 | 7.8 | — | — | — | google / android | In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a con | 149d ago |
| CVE-2026-0096 | 7.8 | — | — | — | google / android | In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due | 149d ago |
| CVE-2026-0094 | 7.8 | — | — | — | google / android | In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to | 149d ago |
| CVE-2026-0093 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible misleading UI due to obfuscation. | 149d ago |
| CVE-2026-0091 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged sh | 149d ago |
| CVE-2026-0089 | 7.8 | — | — | — | google / android | In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a | 149d ago |
| CVE-2026-0088 | 7.8 | — | — | — | google / android | In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to m | 149d ago |
| CVE-2026-0087 | 7.8 | — | — | — | google / android | In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary | 149d ago |
| CVE-2026-0078 | 7.8 | — | — | — | google / android | In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper inp | 149d ago |
| CVE-2026-0077 | 7.8 | — | — | — | google / android | In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due | 149d ago |
| CVE-2026-0076 | 7.8 | — | — | — | google / android | In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. | 149d ago |
| CVE-2026-0045 | 7.8 | — | — | — | google / android | In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a l | 149d ago |
| CVE-2026-0036 | 7.8 | — | — | — | google / android | In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack | 149d ago |
| CVE-2026-0009 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible tapjacking due to a logic error in the code. | 149d ago |
| CVE-2025-48652 | 7.8 | — | — | — | google / android | In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic er | 149d ago |
| CVE-2025-48649 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions | 149d ago |
| CVE-2025-48570 | 7.8 | — | — | — | google / android | In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background | 149d ago |
| CVE-2025-32348 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible background activity launch due to a missing permission check. | 149d ago |
| CVE-2025-26418 | 7.8 | — | — | — | google / android | In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog | 149d ago |
| CVE-2025-22426 | 7.8 | — | — | — | google / android | In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error | 149d ago |
| CVE-2025-22424 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to reveal images across users due to improper input validation. | 149d ago |
| CVE-2026-43958 | 7.8 | — | — | — | — | A flaw was found in rrdcached, a component of rrdtool. | 150d ago |
| CVE-2026-0072 | 7.8 | — | — | — | google / android xr | In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permissio | 150d ago |
| CVE-2026-8501 | 7.8 | — | — | — | — | Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode | 150d ago |
| CVE-2026-38950 | 7.8 | — | — | — | — | An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint f | 150d ago |
| CVE-2026-10118 | 7.8 | — | — | — | — | A flaw was found in Poppler's Splash backend. | 150d ago |
| CVE-2026-32325 | 7.8 | — | — | — | — | Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. | 150d ago |
| CVE-2026-27788 | 7.8 | — | — | — | — | Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and | 150d ago |
| CVE-2026-20455 | 7.8 | — | — | — | mediatek / mt6739 firmware | In geniezone, there is a possible out of bounds write due to a missing bounds check. | 150d ago |
| CVE-2026-46242 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / st | 152d ago |
| CVE-2026-49366 | 7.8 | — | — | — | jetbrains / intellij idea | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | 153d ago |
| CVE-2026-45555 | 7.8 | — | — | — | — | Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. | 153d ago |
| CVE-2025-41281 | 7.8 | — | — | — | waterfall-security / wf-500 firmware | Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS C | 153d ago |
| CVE-2025-41280 | 7.8 | — | — | — | waterfall-security / wf-500 firmware | Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in versio | 153d ago |
| CVE-2025-41278 | 7.8 | — | — | — | waterfall-security / wf-500 firmware | Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R260 | 153d ago |
| CVE-2026-9987 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 al | 153d ago |
| CVE-2026-47333 | 7.8 | — | — | — | canonical / ubuntu linux | Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size o | 154d ago |
| CVE-2026-47331 | 7.8 | — | — | — | canonical / ubuntu linux | Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list. | 154d ago |
| CVE-2026-45353 | 7.8 | — | — | — | electerm project / electerm | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. | 154d ago |
| CVE-2026-49237 | 7.8 | — | — | — | canonical / multipass | An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-20 | 154d ago |
| CVE-2026-46241 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registrati | 154d ago |
| CVE-2026-46240 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix use-after-free in iris_releas | 154d ago |
| CVE-2026-46234 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock | 154d ago |
| CVE-2026-46227 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctp_sendms | 154d ago |
| CVE-2026-46219 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The | 154d ago |
| CVE-2026-46215 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap | 154d ago |
| CVE-2026-46213 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer | 154d ago |
| CVE-2026-46210 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: media: iris: fix use-after-free of fmt_src dur | 154d ago |
| CVE-2026-46209 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/gem: Fix inconsistent plane dimension calc | 154d ago |
| CVE-2026-46208 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop tp_meter sessions during mesh | 154d ago |
| CVE-2026-46206 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject new tp_meter sessions durin | 154d ago |
| CVE-2026-46205 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private | 154d ago |
| CVE-2026-46201 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_ | 154d ago |
| CVE-2026-46197 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against b | 154d ago |
| CVE-2026-46189 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_all | 154d ago |
| CVE-2026-46183 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree() w | 154d ago |
| CVE-2026-46181 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_even | 154d ago |
