Skip to contentGoogle Android vulnerabilities
- google androidIn updateInternal of MediaProvider.java, there is a possible expose contents of files due to a...CVE-2026-28671Fix available3.3 Low
- google androidIn LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in...CVE-2026-28668Fix available7.8 High
- google androidIn WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error...CVE-2026-28664Fix available7.8 High
- google androidIn buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an...CVE-2026-28663Fix available7.8 High
- google androidIn p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due...CVE-2026-28662Fix available8.0 High
- google androidIn findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the...CVE-2026-28658Fix available7.8 High
- google androidIn onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI...CVE-2026-28657Fix available7.8 High
- google androidIn multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a...CVE-2026-28656Fix available7.3 High
- google androidIn multiple functions of RemoteViews.java, there is a possible background activity launch bypass...CVE-2026-28655Fix available7.8 High
- google androidIn multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer...CVE-2026-28653Fix available7.8 High
- google androidIn multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing...CVE-2026-28652Fix available3.1 Low
- google androidIn setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic...CVE-2026-28650Fix available7.8 High
- google androidIn startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission...CVE-2026-28644Fix available7.8 High
- google androidIn executeRequest of ActivityStarter.java, there is a possible background activity launch due to...CVE-2026-28642Fix available7.8 High
- google androidIn rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic...CVE-2026-28639Fix available7.8 High
- google androidIn multiple functions of XmpDataParser.java, there is a possible improper data sanitization due...CVE-2026-28638Fix available3.3 Low
- google androidIn setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps"...CVE-2026-28636Fix available7.8 High
- google androidIn handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD...CVE-2026-28634Fix available7.8 High
- google androidIn initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent...CVE-2026-28633Fix available5.5 Medium
- google androidIn buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a...CVE-2026-28631Fix available7.8 High
- google androidIn onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking...CVE-2026-28630Fix available3.3 Low
- google androidIn onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary...CVE-2026-28626Fix available7.3 High
- google androidIn multiple locations, there is a possible read/write access to files without the proper...CVE-2026-28624Fix available7.8 High
- google androidIn writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the...CVE-2026-28623Fix available3.3 Low
- google androidIn getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location...CVE-2026-28622Fix available3.3 Low
- google androidIn multiple locations, there is a possible unauthorized URI access due to a permissions bypass....CVE-2026-28620Fix available7.8 High
- google androidIn dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This...CVE-2026-28618Public exploitFix available8.8 High
- google androidIn add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource...CVE-2026-28617Fix available5.5 Medium
- google androidIn Setup Wizard, there is a possible way to force connection to a malicious network due to...CVE-2026-28616Fix available7.8 High
- google androidIn onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a...CVE-2026-28614Fix available7.8 High
- google androidIn initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent...CVE-2026-28613Fix available7.3 High
- google androidIn resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection...CVE-2026-28612Fix available7.8 High
- google androidIn read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting...CVE-2026-28609Public exploitFix available8.8 High
- google androidIn multiple functions in multiple locations, there is a possible background activity launch...CVE-2026-28607Fix available7.8 High
- google androidIn handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to...CVE-2026-28606Fix available9.8 Critical
- google androidIn multiple locations, there is a possible use after free due to a race condition. This could...CVE-2026-28604Fix available7.5 High
- google androidIn assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read...CVE-2026-28603Fix available7.8 High
- google androidIn setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible...CVE-2026-28602Fix available7.8 High
- google androidIn onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app...CVE-2026-28600Fix available7.8 High
- google androidIn addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass...CVE-2026-28599Fix available7.8 High
- google androidIn parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of...CVE-2026-28596Fix available5.5 Medium
- google androidIn multiple locations, there is a possible use after free due to a logic error in the code. This...CVE-2026-28594Fix available7.8 High
- google androidIn getItemList of SettingsFragment.java, there is a possible user interaction bypass due to...CVE-2026-28593Fix available7.8 High
- google androidIn multiple locations, there is a possible improper encryption key validation due to a logic...CVE-2026-28590Fix available7.8 High
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible way to permanently...CVE-2026-28584Fix available5.5 Medium
- google androidIn validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds...CVE-2026-28583Fix available7.8 High
- google androidIn onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to...CVE-2026-28582Fix available3.3 Low
- google androidIn onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay...CVE-2026-28572Fix available7.8 High
- google androidIn Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This...CVE-2026-0200Fix available8.8 High
- google androidIn gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper...CVE-2026-0199Fix available7.8 High
- Show moreLoading…