Skip to content
Google Android vulnerabilities
-
google android xr
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to...
CVE-2026-58873
8.4 High
-
google android
In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a...
CVE-2026-58977
6.7 Medium
-
google android
An unprivileged application can exploit a lack of package/signature validation in SystemUI's ...
CVE-2026-58930
No score
-
google android
The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an...
CVE-2026-58927
No score
-
google android
A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free...
CVE-2026-58926
2.5 Low
-
google android
The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware...
CVE-2026-58925
No score
-
google android
The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An...
CVE-2026-58924
No score
-
google android
A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger...
CVE-2026-58915
6.1 Medium
-
google android
An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER`...
CVE-2026-49906
7.8 High
-
google android
The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission...
CVE-2026-49903
No score
-
google android
In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds...
CVE-2026-59048
Fix available
No score
-
google android
In multiple locations, there is a possible denial of service due to a logic error in the code....
CVE-2026-59047
Fix available
6.2 Medium
-
google android
In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due...
CVE-2026-59046
Fix available
6.2 Medium
-
google android
In multiple locations, there is a possible memory corruption due to a race condition. This could...
CVE-2026-59045
Fix available
7.4 High
-
google android
In multiple locations, there is a possible use-after-free due to a logic error in the code. This...
CVE-2026-59044
Fix available
8.4 High
-
google android
In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due...
CVE-2026-59043
Fix available
7.4 High
-
google android
In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race...
CVE-2026-59042
Fix available
7.4 High
-
google android
In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due...
CVE-2026-59031
Fix available
6.2 Medium
-
google android
In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due...
CVE-2026-59028
Fix available
8.4 High
-
google android
In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic...
CVE-2026-59022
Fix available
No score
-
google android
In multiple locations, there is a possible denial of service due to improper input validation....
CVE-2026-59021
Fix available
6.2 Medium
-
google android
In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due...
CVE-2026-59020
Fix available
5.9 Medium
-
google android
In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to...
CVE-2026-59016
Fix available
8.4 High
-
google android
In multiple locations, there is a possible permission bypass due to a confused deputy. This could...
CVE-2026-59015
Fix available
4.0 Medium
-
google android
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This...
CVE-2026-59014
Fix available
8.4 High
-
google android
In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible...
CVE-2026-59012
Fix available
No score
-
google android
In multiple locations, there is a possible permission bypass due to a logic error in the code....
CVE-2026-59011
Fix available
No score
-
google android
In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check....
CVE-2026-59010
Fix available
6.2 Medium
-
google android
In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of...
CVE-2026-59008
Fix available
6.2 Medium
-
google android
In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a...
CVE-2026-59007
Fix available
5.3 Medium
-
google android
In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a...
CVE-2026-59006
Fix available
4.0 Medium
-
google android
In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a...
CVE-2026-59005
Fix available
8.4 High
-
google android
In multiple locations, there is a possible permission bypass due to an uncaught exception. This...
CVE-2026-59004
Fix available
8.4 High
-
google android
In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information...
CVE-2026-59003
Fix available
4.0 Medium
-
google android
In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic...
CVE-2026-59002
Fix available
No score
-
google android
In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a...
CVE-2026-59001
Fix available
No score
-
google android
In multiple locations, there is a possible permission bypass due to a confused deputy. This could...
CVE-2026-59000
Fix available
8.4 High
-
google android
In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition...
CVE-2026-58997
Fix available
No score
-
google android
In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap...
CVE-2026-58995
Fix available
8.4 High
-
google android
In multiple functions of NfcService.java, there is a possible permission bypass due to a missing...
CVE-2026-58994
Fix available
8.4 High
-
google android
In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an...
CVE-2026-58990
Fix available
No score
-
google android
In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to...
CVE-2026-58989
Fix available
8.4 High
-
google android
In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds...
CVE-2026-58988
Fix available
4.0 Medium
-
google android
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible...
CVE-2026-58986
Fix available
8.4 High
-
google android
In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a...
CVE-2026-58985
Fix available
6.2 Medium
-
google android
In multiple locations, there is a possible memory corruption due to a use-after-free. This could...
CVE-2026-58984
Fix available
8.4 High
-
google android
In canPresent of PresentationController.java, there is a possible permission bypass due to a...
CVE-2026-58979
Fix available
8.4 High
-
google android
In multiple locations, there is a possible permission bypass due to a logic error in the code....
CVE-2026-58978
Fix available
6.8 Medium
-
google android
In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a...
CVE-2026-58976
Fix available
No score
-
google android
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check....
CVE-2026-58975
Fix available
8.4 High
- Show olderLoading…