CVE ID :CVE-2026-58970 Published : Nov. 2, 2026, 8:17 p.m. | 2 hours, 46 minutes ago Description :In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-58970 - AppTimeTracker Background Activity Launch Privilege Escalation

VERWANDTEARTIKEL

CVE-2026-71450 - Johnson Controls EasyIO Neo EC and CW Edge Controller Authentication Bypass

CVE-2026-86596 - s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter

CVE-2026-120091 - Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host

CVE-2026-115215 - NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool

CVE-2026-115403 - NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

CVE-2026-58873 - WindowManagerService Permission Bypass and Local Escalation of Privilege