Skip to content

Known vulnerabilities in Google Android

Is your version affected?

CVE Summary Score Published
CVE-2026-28578 In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper… 5.5 Medium Jun 1, 2026
CVE-2026-0077 In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to… 7.8 High Jun 1, 2026
CVE-2026-0078 In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input… 7.8 High Jun 1, 2026
CVE-2026-0079 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an… 5.5 Medium Jun 1, 2026
CVE-2026-0080 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow 6.5 Medium Jun 1, 2026
CVE-2026-0093 In multiple locations, there is a possible misleading UI due to obfuscation 7.8 High Jun 1, 2026
CVE-2026-0085 In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to… 5.5 Medium Jun 1, 2026
CVE-2026-0086 In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null… 6.8 Medium Jun 1, 2026
CVE-2026-0087 In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary… 7.8 High Jun 1, 2026
CVE-2026-0088 In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to… 7.8 High Jun 1, 2026
CVE-2026-0089 In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a… 7.8 High Jun 1, 2026
CVE-2026-0091 In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell… 7.8 High Jun 1, 2026
CVE-2026-0059 In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer… 8.0 High Jun 1, 2026
CVE-2026-0060 In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due… 5.5 Medium Jun 1, 2026
CVE-2026-0061 In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to… 5.9 Medium Jun 1, 2026
CVE-2026-0067 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service… 5.5 Medium Jun 1, 2026
CVE-2026-0069 In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion 5.5 Medium Jun 1, 2026
CVE-2026-0070 In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package… 5.5 Medium Jun 1, 2026
CVE-2026-0074 In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource… 5.5 Medium Jun 1, 2026
CVE-2026-0075 In multiple functions, there is a possible way to access the contacts database due to a SQL injection 7.8 High Jun 1, 2026
CVE-2026-0076 In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check 7.8 High Jun 1, 2026
CVE-2026-0044 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an… 6.5 Medium Jun 1, 2026
CVE-2026-0045 In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a… 7.8 High Jun 1, 2026
CVE-2026-0046 In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a… 6.2 Medium Jun 1, 2026
CVE-2026-0048 In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a… 6.8 Medium Jun 1, 2026

Other Google products