CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
The Linux kernel up to version 4.8.11 has a vulnerability that allows local users to bypass integer overflow checks, potentially leading to denial of service (memory corruption) or unspecified other impacts. This issue affects the ioctl call for a vfio PCI device file.
The tipc_msg_build function in the Linux kernel through version 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which can lead to a heap-based buffer overflow.
The overlayfs implementation in the Linux kernel before version 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory. This allows local users to gain root access by leveraging a configuration where overlayfs is permitted in an arbitrary mount namespace.
IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach.
The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks due to failure to specify a correct cache context.
A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website.
CVE-2016-6745 describes an elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05. A local malicious application could execute arbitrary code within the context of the kernel, posing a significant threat.
CVE-2016-6744 is a vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-6743 describes a vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6742 is a vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6741 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6740 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-6739 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-6738 is a vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
CVE-2016-6737 is a vulnerability in the Android kernel ION subsystem before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6736 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6735 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6734 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-6733 is a vulnerability in the NVIDIA GPU driver for Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.