Browse CVEs

HIGH 7.8 CVE-2025-48652 In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0009 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no addi… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0036 In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalat… Android Mitigation only Fix from $1,9502026-06-01 MEDIUM 6.5 CVE-2026-0039 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0040 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote d… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 6.5 CVE-2026-0041 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial o… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0018 In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This co… Android Mitigation only Fix from $1,6002026-06-01 MEDIUM 5.5 CVE-2026-0042 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to … Android Mitigation only Fix from $1,6002026-06-01 HIGH 8.4 CVE-2025-48595 KEV In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-48649 In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local es… Android No fix yet Fix from $1,9502026-06-01 MEDIUM 5.5 CVE-2025-48648 In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of se… Android Mitigation only Fix from $1,6002026-06-01 HIGH 7.8 CVE-2025-22424 In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-22426 In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to lo… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-26418 In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a manage… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-32348 In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2025-48570 In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This coul… Android Mitigation only Fix from $1,9502026-06-01 HIGH 7.8 CVE-2026-0072 In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local … Android Xr Mitigation only Fix from $1,9502026-06-01 HIGH 8.8 CVE-2026-9999 Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sa… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.3 CVE-2026-9998 Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially p… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.8 CVE-2026-9992 Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.8 CVE-2026-9995 Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.3 CVE-2026-9988 Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a cr… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.3 CVE-2026-9993 Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.3 CVE-2026-9994 Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to pote… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.3 CVE-2026-9997 Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 7.5 CVE-2026-9990 Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific… Chrome 148.0.7778.216+ Fix from $1,9502026-05-28 MEDIUM 6.5 CVE-2026-9996 Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information fr… Chrome 148.0.7778.216+ Fix from $1,6002026-05-28 MEDIUM 6.3 CVE-2026-9989 Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same origin policy via a crafted v… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,6002026-05-28 HIGH 8.8 CVE-2026-9978 Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28 HIGH 8.8 CVE-2026-9983 Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT… Chrome 148.0.7778.215 / 148.0.7778.216+ Fix from $1,9502026-05-28