Skip to contentGoogle Android vulnerabilities
- google androidIn parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic...CVE-2026-55321Fix available7.8 High
- google androidIn thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread...CVE-2026-55319Fix available8.4 High
- google androidIn handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the...CVE-2026-55316Fix available6.8 Medium
- google androidIn insert_node of remap.c, there is a possible way to trigger an out of bounds write in the...CVE-2026-55312Fix available7.8 High
- google androidIn N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the...CVE-2026-55311Fix available8.4 High
- google androidIn multiple functions of verifier.rs, there is a possible way to bypass secure boot signature...CVE-2026-55309Fix available8.4 High
- google androidIn handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access...CVE-2026-55297Fix available6.4 Medium
- google androidIn rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow...CVE-2026-55292Fix available5.3 Medium
- google androidIn multiple functions in multiple locations, there is a possible execution of sensitive USSD...CVE-2026-55289Fix available8.4 High
- google androidIn validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an...CVE-2026-55288Fix available8.4 High
- google androidIn onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user...CVE-2026-55287Fix available8.4 High
- google androidIn multiple locations, there is a possible memory safety issue due to a use-after-free. This...CVE-2026-55283Fix available8.4 High
- google androidIn multiple locations, there is a possible use-after-free due to a race condition. This could...CVE-2026-55275Fix available8.4 High
- google androidIn loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper...CVE-2026-55272Fix available6.2 Medium
- google androidIn forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent...CVE-2026-55271Fix available8.4 High
- google androidIn checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak...CVE-2026-55264Fix available4.0 Medium
- google androidIn multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of...CVE-2026-55263Fix available8.4 High
- google androidIn setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there...CVE-2026-55262Fix available8.4 High
- google androidIn nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code...CVE-2026-55261Fix available8.4 High
- google androidIn UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or...CVE-2026-55257Fix available8.4 High
- google androidIn getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due...CVE-2026-49935Fix available4.0 Medium
- google androidIn multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due...CVE-2026-49934Fix available7.8 High
- google androidIn onActivityResult in multiple locations, there is a possible contact leak from protected...CVE-2026-49931Fix available8.4 High
- google androidIn ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via...CVE-2026-49924Fix available6.2 Medium
- google androidIn onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due...CVE-2026-49923Fix available8.4 High
- google androidIn queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission...CVE-2026-49922Fix available8.4 High
- google androidIn multiple functions of MediaCarouselController.kt, there is a possible way for media to show up...CVE-2026-49912Fix available4.0 Medium
- google androidIn multiple functions of SaveUi.java, there is a possible bypass of package installation...CVE-2026-45514Fix available8.4 High
- google androidIn onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label...CVE-2026-28665Fix available8.4 High
- google androidIn onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling...CVE-2026-28645Fix available6.8 Medium
- google androidIn multiple locations, there is a possible denial of service due to a missing permission check....CVE-2026-28643Fix available6.2 Medium
- google androidIn multiple locations, there is a possible way to share files across profiles due to a logic...CVE-2026-28632Fix available4.0 Medium
- google androidIn getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a...CVE-2026-28621Fix available4.0 Medium
- google androidIn writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission...CVE-2026-28597Fix available8.4 High
- google androidIn shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to...CVE-2026-28588Fix available8.4 High
- google androidIn ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds...CVE-2026-14447Fix available2.3 Low
- google androidIn fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct...CVE-2026-0195Fix available4.0 Medium
- google androidIn handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch....CVE-2026-0193Fix available3.3 Low
- google androidIn event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the...CVE-2026-0191Fix available7.8 High
- google androidIn multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access...CVE-2026-0178Fix available6.7 Medium
- google androidIn multiple locations, there is a possible way to bypass key authorization policies during...CVE-2026-0175Fix available8.4 High
- google androidIn multiple functions of Android.bp, there is a possible way to bind to a privileged debug...CVE-2026-0169Fix available8.4 High
- google androidIn multiple locations, there is a possible method for a primary user to disable secure nfc on...CVE-2026-0053Fix available8.4 High
- google androidIn multiple locations, there is a possible way to trick a user into accepting a permission due to...CVE-2025-26433Fix available8.4 High
- google androidIn multiple locations, there is a possible way to trick a user into disclosing Autofill contents...CVE-2025-22436Fix available8.4 High
- google androidIn Settings, there is a possible permission bypass due to a confused deputy. This could lead to...CVE-2026-286487.8 High
- google androidIn updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass...CVE-2026-286477.8 High
- google androidIn shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a...CVE-2026-286417.8 High
- google androidIn checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a...CVE-2026-286407.8 High
- google androidIn multiple locations, there is a possible permission bypass due to a logic error in the code....CVE-2026-286257.8 High
- Show moreLoading…