Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Unknown[20260911] - Core - XSS in link toolbar layoutSep 25, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityKEVEPSS 0.6%Sep 15, 2026
- High7.8kernel: macvlan: fix possible UAF in macvlan_forward_source()EPSS 0.2%Sep 11, 2026
- High7.8ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation VulnerabilityEPSS 0.3%Sep 8, 2026
- High8.8Google Chromium V8 Out of Bounds Write VulnerabilityKEVEPSS 3.1%Sep 8, 2026
- High8.8Google Chromium V8 Type Confusion VulnerabilityKEVEPSS 48.9%Sep 3, 2026
- Unknowndeconf analytics_insights URL Redirection to Untrusted Site ('Open Redirect')KEVEPSS 1.3%Sep 1, 2026
- High8.2YOURLS is a self-hosted, customizable URL shortener written in PHP.EPSS 0.4%Aug 21, 2026
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.6%Aug 20, 2026
- UnknownFlowiseAI Flowise Missing Authentication for Critical FunctionKEVEPSS 2.0%Jul 8, 2026
- High7.8Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesJun 24, 2026
- UnknownDrupal core - Critical - PHP object injection - SA-CORE-2026-005EPSS 0.4%Jun 17, 2026
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityKEVEPSS 2.4%Jun 8, 2026
- Low3.3In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass.Jun 1, 2026
- Medium4.0In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code.Jun 1, 2026
- High7.8In multiple functions, there is a possible desync in persistence due to an incorrect bounds check.Jun 1, 2026
- Medium5.5In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation.Jun 1, 2026
- High7.8In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Jun 1, 2026
- High7.8In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow.Jun 1, 2026
- High7.8In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code.Jun 1, 2026
- High7.8In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.Jun 1, 2026
- High8.0In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error.Jun 1, 2026
- High7.8In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI.Jun 1, 2026
- High8.0In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow.Jun 1, 2026
- High7.8In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI.Jun 1, 2026