CVE & Exploit Intelligence Database

CVE-2026-3342 7.2 HIGH EPSS 0.00

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

CWE-787 Mar 03, 2026

CVE-2026-0037 8.4 HIGH EPSS 0.00

In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-787 Mar 02, 2026

CVE-2026-0035 8.4 HIGH EPSS 0.00

In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-125 Mar 02, 2026

CVE-2026-0032 7.8 HIGH EPSS 0.00

In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-787 Mar 02, 2026

CVE-2026-0030 8.4 HIGH EPSS 0.00

In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-787 Mar 02, 2026

CVE-2026-0010 8.4 HIGH EPSS 0.00

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-787 Mar 02, 2026

CVE-2025-32313 8.4 HIGH EPSS 0.00

In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-787 Mar 02, 2026

CVE-2025-59603 7.8 HIGH EPSS 0.00

Memory Corruption when processing invalid user address with nonstandard buffer address.

CWE-787 Mar 02, 2026

CVE-2025-47373 7.8 HIGH EPSS 0.00

Memory Corruption when accessing buffers with invalid length during TA invocation.

CWE-787 Mar 02, 2026

CVE-2026-20444 6.7 MEDIUM EPSS 0.00

In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10436995; Issue ID: MSV-5721.

CWE-787 Mar 02, 2026

CVE-2026-20441 6.7 MEDIUM EPSS 0.00

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10432500; Issue ID: MSV-5803.

CWE-787 Mar 02, 2026

CVE-2026-20440 6.7 MEDIUM EPSS 0.00

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824.

CWE-1285 Mar 02, 2026

CVE-2026-20434 7.5 HIGH EPSS 0.00

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.

CWE-787 Mar 02, 2026

CVE-2026-20430 8.8 HIGH EPSS 0.00

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.

CWE-787 Mar 02, 2026

CVE-2026-20428 6.7 MEDIUM EPSS 0.00

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5536.

CWE-787 Mar 02, 2026

CVE-2026-20427 6.7 MEDIUM EPSS 0.00

In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5537.

CWE-787 Mar 02, 2026

CVE-2026-20426 6.7 MEDIUM EPSS 0.00

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538.

CWE-787 Mar 02, 2026

CVE-2026-20425 6.7 MEDIUM EPSS 0.00

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539.

CWE-787 Mar 02, 2026

CVE-2026-20423 7.8 HIGH EPSS 0.00

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956.

CWE-787 Mar 02, 2026

CVE-2026-20416 7.2 HIGH EPSS 0.00

In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10315038 / ALPS10340155; Issue ID: MSV-5155.

CWE-787 Mar 02, 2026