CVE Vulnerability Catalog

The ClusterRenderingService.dump() method, accessible to processes holding android.permission.DUMP and android.permission.PACKAGE_USAGE_STATS, acts as a confused deputy. It allows attackers to write arbitrary values to Settings.Global.OVERLAY_DISPLAY_DEVICES, an operation normally requiring android.permission.WRITE_SECURE_SETTINGS, enabling persistent creation of system overlay displays and injection of key events into the cluster UI.

ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow. A remote attacker can corrupt stack memory by supplying a crafted DFF audio file with an oversized PROP chunk size that is used unvalidated to allocate a variable-length stack array and read file data into it.

Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT PACS. A local low-privileged attacker can modify the world-writable execlist.txt command manifest processed during application updates to execute arbitrary commands with administrator privileges.

A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0 affecting an unknown part of the /api/status file of the Public API component. The manipulation results in information disclosure and requires a local approach. The exploit is public and may be used.

A flaw was found in konflux-ci that allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker able to supply arguments to the affected scripts could trigger unintended command substitution, executing commands with the privileges of the deployment runner.

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. An authenticated attacker can cause a persistent denial of service when connecting for the first time.

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. An authenticated attacker can cause a persistent denial of service.

CVE-2026-116766 is an improper input handling vulnerability in Secure Access server versions between 13.0 and prior to 14.61. An attacker can cause a persistent denial of service of the server.

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.

cPanel contains improper neutralization of a NUL byte, allowing remote attackers to read calendar and contact data of any mail account.

CVE-2026-97718 is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could exploit it, leading to Client-Side Request Forgery.

Dell Alienware Command Center (AWCC) versions up to and including 6.14.20.0 contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could exploit this to achieve command execution, launch phishing attacks, and remote execution.

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could exploit this to achieve elevation of privilege and arbitrary code execution.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of Privilege.

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could exploit this to achieve arbitrary code execution and denial of service.

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could exploit it, leading to Information Tampering, Denial of Service and Spoofing of Application Notifications.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could exploit this to achieve elevation of privilege, arbitrary code execution, and denial of service.

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege.