Threats Tagged 'cve-2026-70387'
View all threats tagged with 'cve-2026-70387'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-70387'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-70387 is a high-severity vulnerability in OnePlus OxygenOS affecting versions 15.0.0 before 15.0.0.2000, 16.0.0 before 16.0.5.1200, and 16.1.0 before 16.1.10.500. It involves an exposed dangerous method in the olc2 logging HAL that allows arbitrary command execution via a binder method. The authorization check is insufficient, relying only on getCallingUid() == 0, and SELinux policies grant broad binder access to this HAL. This enables any uid-0 process in those domains, including dumpstate reachable from unprivileged apps, to execute commands with full Linux capabilities in a privileged SELinux context. Join the discussion | CVE Database V5 | 10/21/2026, 09:07:56 UTC Added: 10/21/2026, 09:18:59 UTC |
Showing 1 to 1 of 1 result