Browse CVEs

HIGH 7.4 CVE-2025-48630 In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. This could… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.3 CVE-2025-48634 In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escala… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.0 CVE-2025-48641 In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no … Android No fix yet Fix from $1,9502026-03-02 HIGH 8.4 CVE-2025-48574 In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permission che… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2025-48579 In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead t… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2025-48582 In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could l… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2025-48602 In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the … Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2025-48605 In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local … Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.8 CVE-2025-48578 In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permission chec… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.4 CVE-2025-48577 In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalatio… Android Mitigation only Fix from $1,9502026-03-02 MEDIUM 6.2 CVE-2025-48585 In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.2 CVE-2025-48587 In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to… Android Mitigation only Fix from $1,6002026-03-02 HIGH 7.8 CVE-2025-48567 In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.4 CVE-2025-48568 In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additi… Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.8 CVE-2024-31328 In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired … Android Mitigation only Fix from $1,9502026-03-02 HIGH 8.4 CVE-2025-32313 In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of … Android Mitigation only Fix from $1,9502026-03-02 MEDIUM 6.5 CVE-2024-43766 In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote (prox… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20440 In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor … Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20441 In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor … Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20443 In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has al… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20444 In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious acto… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.4 CVE-2026-20438 In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has al… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20428 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002026-03-02 HIGH 7.2 CVE-2026-20416 In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… Android Mitigation only Fix from $1,9502026-03-02 MEDIUM 6.7 CVE-2026-20425 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20426 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002026-03-02 MEDIUM 6.7 CVE-2026-20427 In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a maliciou… Android Mitigation only Fix from $1,6002026-03-02 HIGH 7.8 CVE-2026-3223 Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer. Web Designer No fix yet Fix from $1,9502026-02-27 MEDIUM 5.4 CVE-2026-3063 Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious ext… Chrome 145.0.7632.116 / 145.0.7632.117+ Fix from $1,6002026-02-23 CRITICAL 9.8 CVE-2026-3062 Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access… Chrome 145.0.7632.116 / 145.0.7632.117+ Fix from $2,3002026-02-23