| CVE-2026-28582 |
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of…
|
3.3
Low
|
Sep 8, 2026 |
| CVE-2026-28572 |
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack
|
7.8
High
|
Sep 8, 2026 |
| CVE-2026-0084 |
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic…
|
7.8
High
|
Sep 8, 2026 |
| CVE-2026-0065 |
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to…
|
7.8
High
|
Sep 8, 2026 |
| CVE-2026-0054 |
In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a…
|
3.3
Low
|
Sep 8, 2026 |
| CVE-2025-36940 |
Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from…
|
8.8
High
|
Aug 24, 2026 |
| CVE-2026-0163 |
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free
|
9.8
Critical
|
Aug 4, 2026 |
| CVE-2026-28573 |
In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check
|
10.0
Critical
|
Jun 18, 2026 |
| CVE-2026-0063 |
In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a…
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-28587 |
In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing…
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-28615 |
In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0083 |
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0082 |
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to…
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0081 |
In NFC, there is a possible way to spoof an NFC event due to a missing permission check
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0071 |
In SettingsLib, there is a possible missing permission check due to a logic error in the code
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-28575 |
In PackageInstaller.Session#transfer of…
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0064 |
In multiple places, there is a possible persistent denial of service due to resource exhaustion
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0092 |
In Package Manager, there is a possible device lock controller bypass due to a missing permission check
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0068 |
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a…
|
10.0
Critical
|
Jun 17, 2026 |
| CVE-2026-0057 |
In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a…
|
3.3
Low
|
Jun 17, 2026 |
| CVE-2026-0019 |
In SettingsLib, there is a possible way to disable system components due to a logic error in the code
|
7.8
High
|
Jun 17, 2026 |
| CVE-2025-48643 |
In multiple locations there is a possible provisioning bypass due to improper input validation
|
7.8
High
|
Jun 17, 2026 |
| CVE-2025-48640 |
In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check
|
8.0
High
|
Jun 17, 2026 |
| CVE-2025-48617 |
In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass
|
7.8
High
|
Jun 17, 2026 |
| CVE-2025-48571 |
In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic…
|
4.3
Medium
|
Jun 17, 2026 |