Skip to contentGoogle Android vulnerabilities
- google androidIn __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an...CVE-2026-0028Fix available8.4 High
- google androidIn smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after...CVE-2026-0027Fix available6.7 Medium
- google androidIn removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any...CVE-2026-0026Fix available7.8 High
- google androidIn hasImage of Notification.java, there is a possible way to reveal information across users due...CVE-2026-0025Fix available8.4 High
- google androidIn isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to...CVE-2026-0024Fix available4.0 Medium
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible way for an app to...CVE-2026-0023Public exploitFix available7.8 High
- google androidIn hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user...CVE-2026-0021Fix available8.4 High
- google androidIn parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a...CVE-2026-0020Fix available8.4 High
- google androidIn onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to...CVE-2026-0017Fix available7.7 High
- google androidIn multiple locations of AppOpsService.java, there is a possible persistent denial of service due...CVE-2026-0015Fix available6.2 Medium
- google androidIn isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service...CVE-2026-0014Public exploitFix available6.2 Medium
- google androidIn setupLayout of PickActivity.java, there is a possible way to start any activity as a...CVE-2026-0013Public exploitFix available8.4 High
- google androidIn setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due...CVE-2026-0012Fix available6.2 Medium
- google androidIn enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access...CVE-2026-0011Fix available8.4 High
- google androidIn multiple locations, there is a possible out of bounds read and write due to a heap buffer...CVE-2026-0006Public exploitFix available9.8 Critical
- google androidIn onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of...CVE-2026-0005Fix available6.2 Medium
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-69279Fix available7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t7300/t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-69278Fix available7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-61616Fix available7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-61615Fix available7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t7300/t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-61614Fix available7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-61613Fix available7.5 High
- google android, unisoc (shanghai) technologies co., ltd. t7300/t8100/t9100/t8200/t8300 +1 moreIn nr modem, there is a possible system crash due to improper input validation. This could lead...CVE-2025-61612Fix available7.5 High
- google androidIn executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused...CVE-2025-48646Fix available7.8 High
- google androidIn loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to...CVE-2025-48645Fix available9.8 Critical
- google androidIn multiple locations, there is a possible persistent denial of service due to improper input...CVE-2025-48644Fix available5.5 Medium
- google androidIn jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error...CVE-2025-48642Fix available5.5 Medium
- google androidIn multiple functions of Nfc.h, there is a possible use after free due to a race condition. This...CVE-2025-48641Fix available7.0 High
- google androidIn multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token...CVE-2025-48635Fix available7.7 High
- google androidIn relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a...CVE-2025-48634Fix available7.3 High
- google androidIn drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache...CVE-2025-48630Fix available7.4 High
- google androidIn multiple functions of ContentProvider.java, there is a possible way for an app with read-only...CVE-2025-48619Fix available8.4 High
- google androidIn VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the...CVE-2025-48613Fix available7.8 High
- google androidIn DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds...CVE-2025-48611Fix available10.0 Critical
- google androidIn multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files...CVE-2025-48609Fix available9.1 Critical
- google androidIn exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a...CVE-2025-48602Fix available8.4 High
- google androidIn multiple functions of ProfilingService.java, there is a possible persistent denial of service...CVE-2025-48587Fix available6.2 Medium
- google androidIn multiple functions of ProfilingService.java, there is a possible persistent denial of service...CVE-2025-48585Fix available6.2 Medium
- google androidIn multiple locations, there is a possible way to delete media without the...CVE-2025-48582Fix available8.4 High
- google androidIn multiple functions of MediaProvider.java, there is a possible external storage write...CVE-2025-48579Fix available8.4 High
- google androidIn multiple functions of MediaProvider.java, there is a possible way to bypass the...CVE-2025-48578Fix available7.8 High
- google androidIn multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to...CVE-2025-48577Fix available7.4 High
- google androidIn validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept...CVE-2025-48574Fix available8.4 High
- google androidIn multiple locations, there is a possible lockscreen bypass due to a race condition. This could...CVE-2025-48568Fix available7.4 High
- google androidIn multiple locations, there is a possible bypass of a file path filter designed to prevent...CVE-2025-48567Fix available7.8 High
- google androidIn hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to...CVE-2025-36920Fix available8.4 High
- google androidIn UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect...CVE-2025-32313Fix available8.4 High
- google androidIn multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to...CVE-2024-43766Fix available6.5 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn pcie, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2026-204175.3 Medium
- google android, mediatek, inc. mediatek chipset +1 moreIn imgsys, there is a possible memory corruption due to improper locking. This could lead to...CVE-2026-204155.5 Medium
- Show moreLoading…