Total
398554 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21061 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 6.5 MEDIUM |
| Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability. | |||||
| CVE-2026-21062 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 3.3 LOW |
| Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data. | |||||
| CVE-2026-21063 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 6.1 MEDIUM |
| Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function. | |||||
| CVE-2026-21064 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 5.5 MEDIUM |
| Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability. | |||||
| CVE-2026-21065 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 7.8 HIGH |
| Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | |||||
| CVE-2026-21066 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 7.8 HIGH |
| Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory. | |||||
| CVE-2026-21068 | 1 Samsung | 1 Android | 2026-08-19 | N/A | 7.8 HIGH |
| Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code. | |||||
| CVE-2026-20498 | 1 Mediatek | 20 Mt6991, Mt6991 Firmware, Mt8768 and 17 more | 2026-08-19 | N/A | 6.0 MEDIUM |
| In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765. | |||||
| CVE-2026-20473 | 1 Mediatek | 34 Mt6991, Mt6991 Firmware, Mt6993 and 31 more | 2026-08-19 | N/A | 6.0 MEDIUM |
| In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759. | |||||
| CVE-2026-74963 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | N/A | 5.4 MEDIUM |
| Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1. | |||||
| CVE-2026-74958 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | N/A | 7.5 HIGH |
| Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. | |||||
| CVE-2026-74956 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | N/A | 9.1 CRITICAL |
| Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. | |||||
| CVE-2026-74954 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | N/A | 7.5 HIGH |
| Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. | |||||
| CVE-2026-74938 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | N/A | 9.1 CRITICAL |
| Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. | |||||
| CVE-2026-74937 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | N/A | 8.8 HIGH |
| Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. | |||||
| CVE-2025-25137 | 2026-08-18 | N/A | 6.5 MEDIUM | ||
| Cross-Site Request Forgery (CSRF) vulnerability in kareemsultan Social Links social-links allows Cross Site Request Forgery. This issue affects Social Links: from n/a through 1.0.11. | |||||
| CVE-2026-7246 | 1 Palletsprojects | 1 Click | 2026-08-18 | N/A | 7.2 HIGH |
| This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account. | |||||
| CVE-2026-62574 | 1 Oracle | 4 Graalvm, Graalvm For Jdk, Jdk and 1 more | 2026-08-18 | N/A | 7.8 HIGH |
| Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | |||||
| CVE-2026-56874 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||
| CVE-2026-56873 | 2026-08-18 | N/A | N/A | ||
| Rejected reason: reserved but not needed | |||||