CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.23)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
CVE-2017-0403 describes an elevation of privilege vulnerability in the kernel performance subsystem that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2017-0394 is a vulnerability in Telephony that allows a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service.
CVE-2017-0389 describes a denial of service vulnerability in core networking that could allow a remote attacker to use specially crafted network packets to cause a device hang or reboot.
A vulnerability in Mediaserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
A privilege escalation vulnerability in the libnl library could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
CVE-2017-0384 is a privilege escalation vulnerability in libeffects in Audioserver that could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions from 4.4.4 to 7.1.
CVE-2017-0383 is a privilege escalation vulnerability in the Framework APIs that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 7.0 and 7.1.
A vulnerability in the Framesequence library allows for remote code execution, enabling an attacker to execute arbitrary code in the context of an unprivileged process. This issue affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.
An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission.
A vulnerability in Binder allows a local malicious application to execute arbitrary code within the context of a privileged process. It requires compromising a privileged process first, which mitigates the risk.
CVE-2016-8466 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it first requires compromising a privileged process.
CVE-2016-8465 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it first requires compromising a privileged process.
CVE-2016-8464 describes an elevation of privilege vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it requires compromising a privileged process first.
CVE-2016-8458 is a privilege escalation vulnerability in the Synaptics touchscreen driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-8457 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-8456 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-8455 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-8454 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-8453 is a privilege escalation vulnerability in the Broadcom Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.