| CVE-2026-49922 |
In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-49912 |
In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement…
|
4.0
Medium
|
Nov 2, 2026 |
| CVE-2026-45514 |
In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-28665 |
In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-28645 |
In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a…
|
6.8
Medium
|
Nov 2, 2026 |
| CVE-2026-28643 |
In multiple locations, there is a possible denial of service due to a missing permission check
|
6.2
Medium
|
Nov 2, 2026 |
| CVE-2026-28632 |
In multiple locations, there is a possible way to share files across profiles due to a logic error in the code
|
4.0
Medium
|
Nov 2, 2026 |
| CVE-2026-28621 |
In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check
|
Not rated
|
Nov 2, 2026 |
| CVE-2026-28597 |
In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-28588 |
In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-0053 |
In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2025-26433 |
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2025-22436 |
In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-56952 |
In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing…
|
6.7
Medium
|
Oct 6, 2026 |
| CVE-2026-56936 |
In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check
|
6.8
Medium
|
Oct 6, 2026 |
| CVE-2026-56906 |
In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition
|
7.0
High
|
Oct 6, 2026 |
| CVE-2026-55330 |
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the…
|
9.8
Critical
|
Oct 6, 2026 |
| CVE-2026-55307 |
In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code
|
4.4
Medium
|
Oct 6, 2026 |
| CVE-2026-0198 |
In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check
|
4.4
Medium
|
Oct 6, 2026 |
| CVE-2026-28648 |
In Settings, there is a possible permission bypass due to a confused deputy
|
7.8
High
|
Oct 5, 2026 |
| CVE-2026-28647 |
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error…
|
7.8
High
|
Oct 5, 2026 |
| CVE-2026-28641 |
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission…
|
7.8
High
|
Oct 5, 2026 |
| CVE-2026-28640 |
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass…
|
7.8
High
|
Oct 5, 2026 |
| CVE-2026-28625 |
In multiple locations, there is a possible permission bypass due to a logic error in the code
|
7.8
High
|
Oct 5, 2026 |
| CVE-2026-58880 |
In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition
|
7.0
High
|
Oct 5, 2026 |