CVE-2026-59573

Buffer Overflow in Android AVC Decoder Enables Local Privilege Escalation

In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Android

CVE-2026-59587

Out-of-Bounds Write in stpropnci_prop_st_build_set_custom_polling_cmd Leads to Local Privilege Escalation

In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bounds write into global memory due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Android

CVE-2026-59589

AV1 Decoder Non-Heap Buffer Overflow Allows Local Privilege Escalation

In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Android

CVE-2026-59608

Non-Heap Buffer Overflow in HEVC Decoder Allows Local Privilege Escalation

In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Android

CVE-2026-59612

Non-Heap Buffer Overflow in Android AVC Decoder Allows Local Privilege Escalation

In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed. User interaction is for exploitation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Android

CVE-2026-97845

Uncontrolled recursion vulnerability in QXmlSimpleReader XML parsing impacts Qt

An uncontrolled recursion vulnerability has been discovered in the Qt QXmlSimpleReader XML parsing functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt XML module (Qt 5).

CVSS 4.0 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Qt

Products

Qt Qt5compat Qt Framework and 1 more

CVE-2026-126350

Addressable: Regular Expression Denial of Service in Addressable templates with certain exploded expressions

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI template expressions using the explode modifier with the slash, dot, semicolon, question-mark, or ampersand operators generate ambiguous regular expressions. When Template#match or Template#extract processes an attacker-controlled URI beginning with the operator's leading character, optional member separators allow catastrophic backtracking and denial of service on MRI Ruby before 3.2 and JRuby. Addressable 2.9.0 incompletely remediated the earlier template issue because its tests did not reach these operator-prefixed paths. URI parsing and Template#expand are unaffected. This issue is fixed in version 2.9.1.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sporkmonger

Products

Addressable

CVE-2026-126352

Addressable: Regular Expression Denial of Service in Addressable templates with multiple variables

Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.3.0 until 2.9.1, URI templates with several variables in one expression or several adjacent expressions generate ambiguous regular expressions. Affected forms include multi-variable expressions using operators other than plus and number sign, large plus or number-sign expressions, and adjacent single-variable expressions. Template#match or Template#extract can backtrack polynomially or exponentially on attacker-controlled URIs, causing denial of service on MRI Ruby before 3.2 and JRuby, with the large plus and number-sign form also affecting MRI Ruby 3.2 and TruffleRuby 40.0. URI parsing and Template#expand are unaffected. This issue is fixed in version 2.9.1.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Sporkmonger

Products

Addressable

CVE-2026-128066

Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectory_v2.load() in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small crafted TIFF or EXIF-bearing JPEG, PNG, WebP, or MPO can therefore cause memory use quadratic in the input size. TIFF and some JPEG paths trigger parsing during Image.open(), while other formats are exposed when EXIF is requested, including through getexif() or ImageOps.exif_transpose(). The declared pixel dimensions do not bound this metadata allocation, so decompression-bomb checks do not prevent process memory exhaustion. This issue is fixed in version 13.0.0.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Python-pillow

Products

Pillow

CVE-2026-111333

Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Citrix

Products

Gateway Netscaler Adc Netscaler Gateway

CVE-2026-111334

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Citrix

Products

Gateway Netscaler Adc Netscaler Gateway

CVE-2026-116432

Sensitive Information Exposed in Dell PowerScale InsightIQ Logs

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116436

Sensitive Information Leakage via Log Files in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116421

Sensitive Information Disclosure via Log Insertion in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116438

Missing Authorization Enables Remote Denial of Service in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116426

Sensitive Information Logging Vulnerability in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116422

Insertion of Sensitive Information into Log Files Allows Remote Disclosure

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116417

Weak Password Requirements Allow Information Disclosure in Dell PowerScale InsightIQ

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116424

Dell PowerScale InsightIQ Unauthorized Access Vulnerability

Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq

CVE-2026-116425

Unauthorized Access in Dell PowerScale InsightIQ (Versions 6.3.0‑6.4.0)

Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Unauthorized access.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Powerscale Insightiq