Browse CVEs

HIGH 7.8 CVE-2026-0099 In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. Th… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0100 In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0087 In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in … Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0088 In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0089 In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This cou… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0091 In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0093 In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional exec… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0094 In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or… Android Mitigation only Fix from $1,9502026-06-01 MEDIUM 6.8 CVE-2026-0086 In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to loca… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0080 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote d… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0079 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0085 In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This coul… Android Mitigation only Fix from $1,6002026-06-01 HIGH 7.8 CVE-2026-0076 In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0077 In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0078 In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to … Android Mitigation only Fix from $1,9502026-06-01 MEDIUM 5.9 CVE-2026-0061 In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. Th… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.9 CVE-2026-0075 In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privile… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0060 In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This… Android No fix yet Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0067 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code.… Android No fix yet Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0069 In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of serv… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0070 In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation.… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0074 In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local d… Android Mitigation only Fix from $1,6002026-06-01 HIGH 8.0 CVE-2026-0059 In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0045 In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could… Android Mitigation only Fix from $1,9502026-06-01 MEDIUM 6.8 CVE-2026-0048 In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0044 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This could lead… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0051 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This could lea… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0052 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote d… Android No fix yet Fix from $1,6002026-06-01 MEDIUM 6.2 CVE-2026-0046 In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This c… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.2 CVE-2026-0055 In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory du… Android Mitigation only Fix from $1,6002026-06-01