CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- google androidIn moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background...8.4 High
- google androidIn run of AddAccountSettings.java, there is a possible background activity launch due to a...8.4 High
- google androidIn do_fault_around of memory.c, there is a possible use after free due to a logic error in the...8.4 High
- google androidIn parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input...7.5 High
- google androidIn multiple locations, there is a possible persistent denial of service due to improper input...6.2 Medium
- google androidIn png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This...9.8 Critical
- google androidIn prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission...8.4 High
- google androidIn process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in...5.3 Medium
- google androidIn updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic...7.8 High
- google androidIn multiple locations, there is a possible permission bypass due to a confused deputy. This could...8.4 High
- google androidIn startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due...8.4 High
- google androidIn multiple locations, there is a possible denial of service due to a logic error in the code....7.5 High
- google androidIn decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer...7.5 High
- google androidIn descramble of multiple files, there is a possible out-of-bounds write due to improper casting....8.4 High
- google androidIn checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass...4.0 Medium
- google androidIn multiple locations, there is a possible memory safety issue due to a use-after-free. This...9.8 Critical
- google androidIn multiple locations, there is a possible denial of service due to improper input validation....6.2 Medium
- google androidIn set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a...8.4 High
- google androidIn onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass...4.0 Medium
- google androidIn onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap...9.8 Critical
- google androidIn getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a...8.4 High
- google androidIn setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible...8.4 High
- google androidIn decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This...8.1 High
- google androidIn multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing...7.5 High
- google androidIn kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the...8.4 High
- google androidIn multiple locations, there is a possible out of bounds write due to an integer overflow. This...8.4 High
- google androidIn multiple locations, there is a possible out of bounds read/write due to an incorrect bounds...8.4 High
- google androidIn multiple functions of Helpers.java, there is a possible information disclosure due to improper...4.0 Medium
- google androidIn multiple locations, there is a possible background activity launch due to a logic error in the...8.4 High
- google androidIn handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced...7.8 High
- google androidIn fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free....8.4 High
- google androidIn multiple functions of base.c, there is a possible use-after-free due to a race condition. This...8.4 High
- google androidIn multiple functions of dma-buf.c, there is a possible use after free due to a race condition....8.4 High
- google androidIn ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This...8.4 High
- google androidIn multiple functions of fork.c, there is a possible use after free due to a logic error in the...8.4 High
- google androidIn __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect...8.4 High
- google androidIn multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access...6.2 Medium
- google androidIn parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of...6.2 Medium
- google androidIn parseContentType of PduParser.java, there is a possible denial of service due to an integer...7.5 High
- google androidIn mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping...6.7 Medium
- google androidIn decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code....3.3 Low
- google androidIn smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to...4.0 Medium
- google androidIn multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate...2.3 Low
- google androidIn smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds...6.7 Medium
- google androidIn multiple locations, there is a possible way to dump secure cache lines into non-secure memory...2.3 Low
- google androidIn Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger...7.5 High
- google androidIn get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error...3.3 Low
- google androidIn multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated...6.7 Medium
- google androidIn ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds...8.4 High
- google androidIn bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side...2.9 Low
- Show moreLoading…