CVE-2026-0078
published 2026-06-01CVE-2026-0078: In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local…
PriorityP344high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.08%
0.2th percentile
In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_redhat2.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation.
ghsa_unreviewed·2026-06-02
CVE-2026-0078 [MEDIUM] CWE-20 In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation.
In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Red Hat
vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
vendor_redhat·2026-02-27·CVSS 2.2
CVE-2026-28422 [LOW] CWE-135 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering
Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.
A flaw was found in Vim, an open-source command-line text editor. A local user could exploit a stack-buffer-overflow vulnerability in the `build_stl_str_hl()` function by rendering a statusline with a multi-byte fill character on a very wide terminal. This could lead to an integrity impact, where data might be modified.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc
No detection rules found.
No public exploits indexed.
2026-06-01
Published