Vuldb Updates

A vulnerability classified as problematic has been found in Samba. Affected by this issue is some unknown functionality of the component vfs_worm. This manipulation causes improper handling of insufficient permissions or privileges. The identification of this vulnerability is CVE-2026-2340. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.139/6.12.89/6.18.29/7.0.6/7.1-rc2. Affected is the function l2cap_sock_get_sndtimeo_cb of the component Bluetooth. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-45836. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical was found in Google Android 14/15/16/16-qpr2. This issue affects some unknown processing of the file ubsan_throwing_runtime.cpp. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2026-0051. The attack can be launched remotely. No exploit exists. It is best practice to apply a patch to resolve this issue.

A vulnerability described as critical has been identified in Google Android 14/15/16/16-qpr2. This affects the function createSessionInternal of the file PackageInstallerService.java. The manipulation results in path traversal. This vulnerability was named CVE-2026-0055. The attack needs to be approached locally. There is no available exploit. Applying a patch is advised to resolve this issue.

A vulnerability classified as critical was found in Google Android 14/15/16/16-qpr2. Affected is an unknown function of the file sdp_discovery.cc. Such manipulation leads to heap-based buffer overflow. This vulnerability is referenced as CVE-2026-0059. The attack needs to be initiated within the local network. No exploit is available. A patch should be applied to remediate this issue.

A vulnerability labeled as critical has been found in Google Android 14/15/16/16-qpr2. This impacts an unknown function of the file WindowState.java. The manipulation results in permission issues. This vulnerability is known as CVE-2026-0061. Attacking locally is a requirement. No exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability categorized as critical has been discovered in Google Android 14/15/16/16-qpr2. The impacted element is the function getPreferredSize of the file LauncherProcessImageListener.kt. Executing a manipulation can lead to denial of service. This vulnerability appears as CVE-2026-0074. The attack requires local access. There is no available exploit. A patch should be applied to remediate this issue.

A vulnerability described as critical has been identified in Google Android 14/15/16/16-qpr2. Affected by this vulnerability is an unknown functionality of the file DevicePolicyManagerService.java. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2026-0070. Local access is required to approach this attack. No exploit exists. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in Google Android 14/15/16/16-qpr2. It has been rated as critical. The affected element is the function validateNode of the file ResourceTypes.cpp. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-0076. The attack requires a local approach. No exploit exists. It is suggested to install a patch to address this issue.

A vulnerability, which was classified as critical, has been found in Google Android 14/15/16/16-qpr2. This vulnerability affects the function setGlobalProxy of the file DevicePolicyManagerService.java. The manipulation leads to improper synchronization. This vulnerability is referenced as CVE-2026-0078. The attack can only be performed from a local environment. No exploit is available. It is suggested to install a patch to address this issue.

A vulnerability, which was classified as critical, has been found in Google Android 14/15/16/16-qpr2. Affected by this vulnerability is an unknown functionality of the file ubsan_throwing_runtime.cpp. Performing a manipulation results in integer overflow. This vulnerability is identified as CVE-2026-0080. The attack can be initiated remotely. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability classified as critical has been found in Linux Kernel up to 6.18.15/6.19.5. This affects an unknown function of the component wifi. Performing a manipulation results in divide by zero. This vulnerability is cataloged as CVE-2026-43267. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.5. Affected is an unknown function of the component CPER. The manipulation of the argument section_length leads to buffer overflow. This vulnerability is documented as CVE-2026-43266. The attack requires being on the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.18.15/6.19.5. This affects the function mana_serv_reset of the component driver. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-43276. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.5. Affected by this vulnerability is the function ghes_new. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2026-43277. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.19.8. Affected is the function ceph_unlink of the file fs/inode.c. Performing a manipulation results in time-of-check time-of-use. This vulnerability was named CVE-2026-43420. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability identified as critical has been detected in Fortinet FortiSandbox Cloud, FortiSandbox and FortiSandbox PaaS up to 4.4.8/5.0.1. Affected by this vulnerability is an unknown functionality of the component HTTP Request Handler. This manipulation causes missing authorization. This vulnerability appears as CVE-2026-26083. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as critical has been identified in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2. This affects the function l2cap_sock_state_change_cb of the component Bluetooth. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2026-45834. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.6/7.1-rc2. This impacts the function l2cap_sock_new_connection_cb of the component Bluetooth. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-45835. The attack must be carried out from within the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.19.5. This impacts the function ceph_zero_partial_object of the file /src/vstart.sh of the component ceph. The manipulation leads to privilege escalation. This vulnerability is referenced as CVE-2026-43273. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.