Browse CVEs

MEDIUM 5.5 CVE-2026-0043 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 HIGH 7.8 CVE-2025-48652 In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0009 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no addi… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0036 In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalat… Android Mitigation only Fix from $1,9502026-06-01 MEDIUM 6.5 CVE-2026-0039 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0040 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote d… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0041 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial o… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0018 In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This co… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0042 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 HIGH 8.4 CVE-2025-48595 KEV In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-48649 In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local es… Android No fix yet Fix from $1,9502026-06-01 MEDIUM 5.5 CVE-2025-48648 In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of se… Android Mitigation only Fix from $1,6002026-06-01 HIGH 7.8 CVE-2025-22424 In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-22426 In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to lo… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-26418 In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a manage… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-32348 In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-48570 In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This coul… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0072 In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local … Android Xr Mitigation only Fix from $1,9502026-06-01 HIGH 8.3 CVE-2026-10014 Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to p… Chrome Mitigation only Fix from $1,9502026-05-28 HIGH 7.5 CVE-2025-71255 In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges need… Android Mitigation only Fix from $1,9502026-05-06 HIGH 7.5 CVE-2025-71256 In nr modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges neede… Android Mitigation only Fix from $1,9502026-05-06 HIGH 7.5 CVE-2025-71252 In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges need… Android Mitigation only Fix from $1,9502026-05-06 HIGH 7.5 CVE-2025-71253 In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges need… Android Mitigation only Fix from $1,9502026-05-06 HIGH 7.5 CVE-2025-71254 In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges need… Android Mitigation only Fix from $1,9502026-05-06 HIGH 7.5 CVE-2025-71251 In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution p… Android Mitigation only Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-0073 In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could le… Android Mitigation only Fix from $1,9502026-05-04 MEDIUM 6.2 CVE-2026-0049 In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local … Android Mitigation only Fix from $1,6002026-04-06 MEDIUM 5.5 CVE-2025-48651 In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This c… Android Mitigation only Fix from $1,6002026-04-06 CRITICAL 9.8 CVE-2026-0116 In __mfc_handle_released_buf of mfc_core_isr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code… Android Mitigation only Fix from $2,3002026-03-10 CRITICAL 9.8 CVE-2026-0120 In modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execu… Android Mitigation only Fix from $2,3002026-03-10