CVE-2026-101178

MediumCVSS 6.6/10Last modified Nov 2, 2026

Description

Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2026
Last modified
Nov 2, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1011794.7Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-101187.8A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, whenCVE-2026-1011804.3DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011815.5Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentialiCVE-2026-1011825.9Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011835.9UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011845.5Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011855.9OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2026-1011867.5DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-1011879.1A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function pop_usb_device of the file usr/lib/luaCVE-2026-1011888.3A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwd_set of the fCVE-2026-101198.8A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/for
CVE-2026-101178: Medium severity, CVSS 6.6 | Vulnix