Browse CVEs

HIGH 7.5 CVE-2026-0109 In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of s… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.4 CVE-2026-0112 In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502026-03-10 HIGH 8.4 CVE-2025-36920 In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation. This could lead to local e… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.8 CVE-2025-48611 In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.5 CVE-2025-61613 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61614 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61615 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61616 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-69278 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-69279 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 HIGH 7.5 CVE-2025-61612 In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502026-03-09 CRITICAL 9.6 CVE-2026-3545 Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $2,3002026-03-04 HIGH 8.8 CVE-2026-3540 Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access vi… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3541 Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a … Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3542 Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3543 Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory acc… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3544 Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a c… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3536 Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3537 Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruptio… Chrome 145.0.7632.159+ Fix from $1,9502026-03-04 HIGH 8.8 CVE-2026-3538 Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a … Chrome 145.0.7632.159+ Fix from $1,9502026-03-04 CRITICAL 9.8 CVE-2026-3136 An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execut… Cloud Build 2026-1-26+ Fix from $2,3002026-03-03 HIGH 8.4 CVE-2026-0028 In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation … Android Patch available Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0029 In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege… Android Patch available Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0030 In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local… Android Patch available Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0031 In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr… Android Patch available Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0034 In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could … Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0035 In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in th… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0037 In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privil… Android Patch available Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0038 In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local … Android Patch available Fix from $1,9502026-03-02 HIGH 8.4 CVE-2026-0047 In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission chec… Android Mitigation only Fix from $1,9502026-03-02