| CVE-2026-0038 |
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0037 |
In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0035 |
In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0034 |
In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0032 |
In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code
|
7.8
Élevée
|
2 mars 2026 |
| CVE-2026-0031 |
In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0030 |
In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0029 |
In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0028 |
In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0027 |
In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free
|
6.7
Moyenne
|
2 mars 2026 |
| CVE-2026-0026 |
In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due…
|
7.8
Élevée
|
2 mars 2026 |
| CVE-2026-0025 |
In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0024 |
In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of…
|
4.0
Moyenne
|
2 mars 2026 |
| CVE-2026-0023 |
In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due…
|
7.8
Élevée
|
2 mars 2026 |
| CVE-2026-0021 |
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0020 |
In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0017 |
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the…
|
7.7
Élevée
|
2 mars 2026 |
| CVE-2026-0015 |
In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input…
|
6.2
Moyenne
|
2 mars 2026 |
| CVE-2026-0014 |
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input…
|
6.2
Moyenne
|
2 mars 2026 |
| CVE-2026-0013 |
In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0012 |
In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in…
|
6.2
Moyenne
|
2 mars 2026 |
| CVE-2026-0011 |
In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a…
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0010 |
In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0008 |
In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy
|
8.4
Élevée
|
2 mars 2026 |
| CVE-2026-0007 |
In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a…
|
7.8
Élevée
|
2 mars 2026 |