CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.22)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
A remote code execution vulnerability in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing.
A vulnerability in the Qualcomm ADSPRPC driver allows a local malicious application to execute arbitrary code within the kernel context. It requires first compromising a privileged process.
CVE-2016-10291 describes an elevation of privilege vulnerability in the Qualcomm Slimbus driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10290 describes an elevation of privilege vulnerability in the Qualcomm shared memory driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10289 is a privilege escalation vulnerability in the Qualcomm crypto driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10288 is a privilege escalation vulnerability in the Qualcomm LED driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-10287 is a privilege escalation vulnerability in the Qualcomm sound driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10286 describes an elevation of privilege vulnerability in the Qualcomm video driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-10285 is a privilege escalation vulnerability in the Qualcomm video driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
CVE-2016-10284 is a privilege escalation vulnerability in the Qualcomm video driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
CVE-2016-10282 describes an elevation of privilege vulnerability in the MediaTek thermal driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
A vulnerability in the MediaTek thermal driver allows a local malicious application to execute arbitrary code within the kernel context. It requires first compromising a privileged process.
CVE-2016-10280 is a privilege escalation vulnerability in the MediaTek thermal driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
A vulnerability in the Motorola bootloader allows a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise.
A vulnerability in the Qualcomm bootloader allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
A vulnerability in the Qualcomm bootloader allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
CVE-2016-10274 is a vulnerability in the MediaTek touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.