CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2026-587048.8/HIGHEPSS 0.6%CISA KEV
2026-09-15

Google Pixel Cellular Modem Privilege Escalation Vulnerability (CVE-2026-58704) Security Advisory

[Affected Scope] Google Pixel devices and Android hardware utilizing specific cellular modem chipsets.

[Impact] Remote (proximal/adjacent) attackers can bypass permissions to escalate privileges without user interaction, leading to full modem compromise.

[Mitigation] Immediately apply the September 2026 or later Android security patches (2026-09-01).

CVE-2024-430937.3/HIGHEPSS 0.7%CISA KEV
2024-11-13

Android ExternalStorageProvider File Path Filter Bypass via Incorrect Unicode Normalization (CVE-2024-43093)

[Affected Scope] Mobile devices running Android OS utilizing the ExternalStorageProvider component

[Impact] Local attackers can bypass file path filters to access sensitive system directories, leading to local privilege escalation without requiring elevated execution privileges

[Mitigation] Apply the Google Android March 2025 security patch and upgrade device firmware to the latest version

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse