Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 3.7 CVE-2026-11525

undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching_CVE-2026-11525

Impact: When undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather t...

undici undici CVE
LOW 3.5 CVE-2026-35068

CVE-2026-35068_CVE-2026-35068

Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') v...

Dell PowerFlex CVE
LOW 3.1 CVE-2025-62340

HCL iControl was affected by Inadequate Session Timeout vulnerability_CVE-2025-62340

HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to ...

HCL Software iControl v4.2.0 CVE
LOW 3.3 CVE-2026-0057

CVE-2026-0057_CVE-2026-0057

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. ...

Google Android 17 CVE
LOW 3.1 CVE-2026-12458

CVE-2026-12458_CVE-2026-12458

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in spec...

Google Chrome 149.0.7827.155 CVE
LOW 3.3 CVE-2026-0158

CVE-2026-0158_CVE-2026-0158

In Camera, there is a possible unauthorized way to access photos due to a missing permission check. This could lead to local information disclosure...

Google Android Android kernel CVE
LOW 3.3 CVE-2026-0145

CVE-2026-0145_CVE-2026-0145

In keymint, there is a possible Permission Bypass due to a logic error in the code. This could lead to local information disclosure with no additio...

Google Android Android kernel CVE
LOW 3.3 CVE-2026-0142

CVE-2026-0142_CVE-2026-0142

In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could lead to local information ...

Google Android Android kernel CVE
LOW 3.3 CVE-2026-0134

CVE-2026-0134_CVE-2026-0134

In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could l...

Google Android Android kernel CVE
LOW 3.5 CVE-2026-0130

CVE-2026-0130_CVE-2026-0130

In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosu...

Google Android Android kernel CVE