Skip to contentGoogle Android vulnerabilities
- google androidIn VPU, there is a possible information dislclosure due to a logic error in the code. This could...CVE-2026-0197Fix available4.4 Medium
- google androidIn multiple locations, there is a possible permission bypass due to an integer overflow. This...CVE-2026-0194Fix available8.4 High
- google androidIn Bootloader, there is a possible escalation of privilege due to a missing permission check....CVE-2026-0192Fix available6.7 Medium
- google androidIn ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the...CVE-2026-0189Fix available8.4 High
- google androidIn gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to...CVE-2026-0187Fix available6.7 Medium
- google androidIn ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error...CVE-2026-0186Fix available6.7 Medium
- google androidIn CPM, there is a possible information disclosure due to a confused deputy. This could lead to...CVE-2026-0183Fix available4.4 Medium
- google androidIn Bootloader, there is a possible permission bypass due to a missing permission check. This...CVE-2026-0179Fix available6.7 Medium
- google androidIn do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing...CVE-2026-0177Fix available4.4 Medium
- google androidIn multiple locations, there is a possible out-of-bounds write due to a logic error in the code....CVE-2026-0171Fix available8.8 High
- google androidIn Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a...CVE-2026-0170Fix available8.8 High
- google androidIn Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This...CVE-2026-0159Fix available8.8 High
- google androidIn multiple functions of HostEmulationManager.java, there is a possible background activity...CVE-2026-0084Fix available7.8 High
- google androidIn areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a...CVE-2026-0065Fix available7.8 High
- google androidIn isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet...CVE-2026-0054Fix available3.3 Low
- google androidUse-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a...CVE-2025-369408.8 High
- google androidIn multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free....CVE-2026-0163Fix available9.8 Critical
- google tink-android, tink-java, tink java +2 moreObservable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerificationCVE-2026-154328.2 High
- google androidIn AndroidManifest.xml, there is a possible persistent denial of service due to a missing...CVE-2026-2857310.0 Critical
- google androidIn setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier...CVE-2026-006310.0 Critical
- google androidIn MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive...CVE-2026-2858710.0 Critical
- androidIn Contacts Provider, there is a possible way to access the contacts database due to SQL...CVE-2026-28576Public exploit10.0 Critical
- google androidIn Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions...CVE-2026-2861510.0 Critical
- google androidIn Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition....CVE-2026-008310.0 Critical
- google androidIn tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access...CVE-2026-008210.0 Critical
- google androidIn NFC, there is a possible way to spoof an NFC event due to a missing permission check. This...CVE-2026-008110.0 Critical
- google androidIn SettingsLib, there is a possible missing permission check due to a logic error in the code....CVE-2026-007110.0 Critical
- google androidIn PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm...CVE-2026-2857510.0 Critical
- google androidIn multiple places, there is a possible persistent denial of service due to resource exhaustion....CVE-2026-006410.0 Critical
- google androidIn Package Manager, there is a possible device lock controller bypass due to a missing permission...CVE-2026-0092Public exploit10.0 Critical
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible method to remove a...CVE-2026-006810.0 Critical
- google androidIn Contacts Provider, there is a possible way to access an incoming call's phone number and...CVE-2026-00573.3 Low
- google androidIn SettingsLib, there is a possible way to disable system components due to a logic error in the...CVE-2026-00197.8 High
- google androidIn multiple locations there is a possible provisioning bypass due to improper input validation....CVE-2025-486437.8 High
- google androidIn multiple locations, there is a possible 3rd party passkey entry pairing approval due to a...CVE-2025-486408.0 High
- google androidIn overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to...CVE-2025-48617Public exploit7.8 High
- google androidIn multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS...CVE-2025-485714.3 Medium
- google androidIn multiple functions of AppOpsService.java, there is a possible missing permission check due to...CVE-2026-28586Fix available3.3 Low
- google androidIn fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an...CVE-2026-28581Fix available4.0 Medium
- google androidIn multiple functions, there is a possible desync in persistence due to an incorrect bounds check...CVE-2026-28580Fix available7.8 High
- google androidIn getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into...CVE-2026-00947.8 High
- google androidIn verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource...CVE-2026-00695.5 Medium
- google androidIn many functions of ComputerEngine.java, there is a possible way to access URIs across users due...CVE-2025-22426Fix available7.8 High
- google androidIn multiple locations, there is a possible way to reveal images across users due to improper...CVE-2025-22424Fix available7.8 High
- google android xrIn addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a...CVE-2026-007210.0 Critical
- google androidIn multiple functions of DevicePolicyManagerService.java, there is a possible desync from...CVE-2026-28578Fix available5.5 Medium
- google androidIn addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a...CVE-2026-28577Fix available7.8 High
- google androidIn several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a...CVE-2026-0165Fix available6.5 Medium
- google androidIn Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2026-0164Fix available8.8 High
- google androidIn ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type...CVE-2026-0162Fix available8.8 High
- Show moreLoading…