2026 CVEs (page 125)
Page 125 of 665 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-28623 | Low | 3.3 | 2026-09-08 | In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could… |
CVE-2026-28622 | Low | 3.3 | 2026-09-08 | In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local i… |
CVE-2026-28620 | High | 7.8 | 2026-09-08 | In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additi… |
CVE-2026-28618 | High | 8.8 | 2026-09-08 | In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional executio… |
CVE-2026-28617 | Medium | 5.5 | 2026-09-08 | In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no… |
CVE-2026-28616 | High | 7.8 | 2026-09-08 | In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege wi… |
CVE-2026-28614 | High | 7.8 | 2026-09-08 | In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege w… |
CVE-2026-28613 | High | 7.3 | 2026-09-08 | In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local esca… |
CVE-2026-28612 | High | 7.8 | 2026-09-08 | In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to… |
CVE-2026-28611 | High | 7.8 | 2026-09-08 | In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to… |
CVE-2026-28609 | High | 8.8 | 2026-09-08 | In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional… |
CVE-2026-28607 | High | 7.8 | 2026-09-08 | In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalatio… |
CVE-2026-28606 | Critical | 9.8 | 2026-09-08 | In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalatio… |
CVE-2026-28604 | High | 7.5 | 2026-09-08 | In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privil… |
CVE-2026-28603 | High | 7.8 | 2026-09-08 | In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could… |
CVE-2026-28602 | High | 7.8 | 2026-09-08 | In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This coul… |
CVE-2026-28600 | High | 7.8 | 2026-09-08 | In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation o… |
CVE-2026-28599 | High | 7.8 | 2026-09-08 | In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local esc… |
CVE-2026-28596 | Medium | 5.5 | 2026-09-08 | In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local de… |
CVE-2026-28594 | High | 7.8 | 2026-09-08 | In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional… |
CVE-2026-28593 | High | 7.8 | 2026-09-08 | In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation… |
CVE-2026-28590 | High | 7.8 | 2026-09-08 | In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privileg… |
CVE-2026-28584 | Medium | 5.5 | 2026-09-08 | In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could le… |
CVE-2026-28583 | High | 7.8 | 2026-09-08 | In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to loca… |
CVE-2026-28582 | Low | 3.3 | 2026-09-08 | In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permiss… |
CVE-2026-28572 | High | 7.8 | 2026-09-08 | In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no… |
CVE-2026-0084 | High | 7.8 | 2026-09-08 | In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local e… |
CVE-2026-0065 | High | 7.8 | 2026-09-08 | In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due… |
CVE-2026-0054 | Low | 3.3 | 2026-09-08 | In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead… |
CVE-2026-9216 | Low | 3.5 | 2026-09-08 | An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi c… |
CVE-2026-9215 | Medium | 6.7 | 2026-09-08 | A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router ad… |
CVE-2026-86673 | High | 7.3 | 2026-09-08 | A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function m… |
CVE-2026-86672 | Medium | 5.3 | 2026-09-08 | A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the f… |
CVE-2026-86670 | Low | 3.7 | 2026-09-08 | A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication… |
CVE-2026-86669 | High | 7.3 | 2026-09-08 | A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a mani… |
CVE-2026-86074 | High | 7.1 | 2026-09-08 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verificatio… |
CVE-2026-85880 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-85877 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network. |
CVE-2026-85875 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-85360 | High | 7.0 | 2026-09-08 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-84003 | High | 7.4 | 2026-09-08 | Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a netwo… |
CVE-2026-84001 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network. |
CVE-2026-84000 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. |
CVE-2026-83999 | High | 7.0 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to e… |
CVE-2026-83998 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-83997 | High | 8.1 | 2026-09-08 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
CVE-2026-83996 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-83995 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-83992 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-83991 | Medium | 5.5 | 2026-09-08 | Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. |
CVE-2026-83990 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-83989 | High | 7.5 | 2026-09-08 | Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network. |
CVE-2026-83988 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83987 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83986 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83985 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83983 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83982 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83981 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83980 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83979 | High | 7.8 | 2026-09-08 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83978 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83977 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83976 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83975 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83974 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83973 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83972 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83971 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83970 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83969 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83968 | High | 7.8 | 2026-09-08 | Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83967 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83955 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83954 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83952 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-83951 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83949 | Medium | 5.5 | 2026-09-08 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-83948 | High | 8.0 | 2026-09-08 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a… |
CVE-2026-83942 | High | 7.8 | 2026-09-08 | Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83941 | Critical | 9.9 | 2026-09-08 | Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network. |
CVE-2026-83940 | High | 7.0 | 2026-09-08 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83939 | High | 8.2 | 2026-09-08 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-83501 | Medium | 5.5 | 2026-09-08 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-83498 | High | 7.8 | 2026-09-08 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-81963 | High | 7.8 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
CVE-2026-81960 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81959 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81958 | Medium | 5.5 | 2026-09-08 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-81957 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81956 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81955 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-81954 | High | 7.8 | 2026-09-08 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81953 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81952 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-81951 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81950 | High | 7.8 | 2026-09-08 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81949 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81948 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-81947 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |