CVE Vulnerability Advisory Database

[Affected Scope] Multiple components within the Android Operating System (OS)

[Impact] Local privilege escalation (LPE) and arbitrary code execution without requiring additional privileges or user interaction, actively exploited in the wild

[Mitigation] Immediately apply the Android June 2026 Security Patch Level or later

[Affected Scope] Mobile and embedded devices powered by Qualcomm chipsets running affected Android kernel versions

[Impact] Local attackers can trigger an integer overflow (CWE-190) during memory alignment, leading to memory corruption and local privilege escalation (LPE) to kernel level

[Mitigation] Immediately apply the March 2026 security patches released by Qualcomm and Android OEMs

[Affected Scope] Devices powered by Qualcomm Snapdragon chipsets running Linux or Android kernel-based graphics drivers

[Impact] Local attackers can trigger kernel memory corruption via malicious IOCTL calls, leading to Local Privilege Escalation (LPE) to Root/Kernel level

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs in or after December 2023

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)

[Affected Scope] Systems running iOS/iPadOS prior to 15.7.7 and 16.5.1, macOS Big Sur/Monterey/Ventura prior to specific patched releases, and watchOS prior to 8.8.1 and 9.5.2

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation has been reported in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.5.1, macOS 13.4.1)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137

[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)

[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.

[Affected Scope] Linux kernel versions before 3.8.9, including certain Android 4.1.2 builds and embedded Linux systems

[Impact] Local attackers can exploit an integer overflow to map the entire kernel memory space with read-write permissions, leading to full root privilege escalation

[Mitigation] Upgrade the Linux kernel to version 3.8.9 or higher, and restrict access permissions to framebuffer device files