CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-0437 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Qualcomm sound driver allows a local malicious application to execute arbitrary code within the kernel context. It requires compromising a privileged process first.
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0434 describes an elevation of privilege vulnerability in the Synaptics touchscreen driver that could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process.
CVE-2017-0433 describes an elevation of privilege vulnerability in the Synaptics touchscreen driver that could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset.
A vulnerability in the MediaTek driver allows a local malicious application to execute arbitrary code within the kernel context. It requires compromising a privileged process first.
CVE-2017-0430 describes an elevation of privilege vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0429 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0428 describes an elevation of privilege vulnerability in the NVIDIA GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2017-0427 describes an elevation of privilege vulnerability in the kernel file system that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service.
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
CVE-2017-0415 is a privilege escalation vulnerability in Mediaserver that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 6.0, 6.0.1, 7.0, and 7.1.1.
CVE-2017-0412 is a privilege escalation vulnerability in the Framework APIs that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 7.0 and 7.1.1.
CVE-2017-0411 is a privilege escalation vulnerability in the Framework APIs that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 7.0 and 7.1.1.
A vulnerability in the Framework APIs allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
CVE-2017-0409 is a vulnerability in the libstagefright library that allows an attacker to execute arbitrary code remotely using a specially crafted file in the context of an unprivileged process. This issue is rated as High due to the potential for remote code execution in applications using this library.