WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor google✕Product android✕
Overview 8,518 matches · 2 in Waratek scope · 1 protected · 32 exploited · 21 CISA KEV · 143 public PoC · 14 EPSS ≥ 0.5
8,518matches 2in Waratek scope0.0% 1protected0.0% 32exploited0.4% 21CISA KEV0.2% 143public PoC1.7% 14EPSS ≥ 0.50.2%
Protected by Waratek 1 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 0.0% Outside Waratek scope 3 0.0% Not applicable 8,513 99.9% Withdrawn CVE 0 0.0%
Critical 652 7.7% High 3,925 46.1% Medium 3,722 43.7% Low 219 2.6% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 0.0% partly blocked 0 0.0% not blocked 8,517 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 32 0.4% Working exploit published 55 0.6% Proof of concept only 81 1.0% Forecast only 7 0.1% No public exploit 8,343 97.9%
split by peak 1,423 / year
Not applicable: 8,513Outside Waratek scope: 3No exploit published: 1Protected by Waratek: 1 Low: 219Medium: 3,722High: 3,925Critical: 652 not blocked: 8,517blocked by ARMR today: 1 No public exploit: 8,343Forecast only: 7Proof of concept only: 81Working exploit published: 55Exploited: 32
20082 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20095 Not applicable5 Medium5 not blocked5 No public exploit5 20101 Not applicable1 High1 not blocked1 Exploited1 201111 Not applicable11 High3 Medium7 Low1 not blocked11 Exploited1 Working exploit published3 No public exploit7 20128 Not applicable8 High2 Medium6 not blocked8 Working exploit published1 Proof of concept only1 No public exploit6 20138 Not applicable8 High4 Medium3 Low1 not blocked8 Working exploit published2 No public exploit6 201416 Not applicable16 High9 Medium5 Low2 not blocked16 Exploited1 Working exploit published4 Proof of concept only1 No public exploit10 2015125 Not applicable125 High91 Medium33 Low1 not blocked125 Exploited3 Working exploit published5 Proof of concept only4 Forecast only6 No public exploit107 2016526 Outside Waratek scope1 Not applicable525 Critical47 High329 Medium145 Low5 not blocked526 Exploited2 Working exploit published11 Proof of concept only6 Forecast only1 No public exploit506 2017846 Protected by Waratek1 Not applicable845 Critical108 High543 Medium190 Low5 blocked by ARMR today1 not blocked845 Exploited1 Working exploit published8 Proof of concept only6 No public exploit831 2018614 Not applicable614 Critical73 High450 Medium87 Low4 not blocked614 Exploited1 Working exploit published11 Proof of concept only2 No public exploit600 2019493 Outside Waratek scope1 Not applicable492 Critical16 High250 Medium217 Low10 not blocked493 Exploited1 Working exploit published5 Proof of concept only2 No public exploit485 2020917 Outside Waratek scope1 Not applicable916 Critical163 High331 Medium392 Low31 not blocked917 Exploited2 Working exploit published3 Proof of concept only11 No public exploit901 2021647 No exploit published1 Not applicable646 Critical27 High249 Medium347 Low24 not blocked647 Exploited2 Proof of concept only2 No public exploit643 20221,223 Not applicable1,223 Critical74 High415 Medium653 Low81 not blocked1,223 Exploited2 Proof of concept only10 No public exploit1,211 20231,423 Not applicable1,423 Critical47 High358 Medium999 Low19 not blocked1,423 Exploited4 Proof of concept only10 No public exploit1,409 2024594 Not applicable594 Critical40 High286 Medium261 Low7 not blocked594 Exploited6 Proof of concept only7 No public exploit581 2025443 Not applicable443 Critical18 High245 Medium176 Low4 not blocked443 Exploited3 Proof of concept only9 No public exploit431 2026616 Not applicable616 Critical39 High358 Medium195 Low24 not blocked616 Exploited2 Proof of concept only10 No public exploit604
2008201020122014201620182020202220242026
8,518 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 86 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-59048 Medium 2026-11-02 Not applicable No public exploit In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59047 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59046 Medium 2026-11-02 Not applicable No public exploit In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59045 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59044 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59043 High 2026-11-02 Not applicable No public exploit In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59042 High 2026-11-02 Not applicable No public exploit In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59031 Medium 2026-11-02 Not applicable No public exploit In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59028 High 2026-11-02 Not applicable No public exploit In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59022 Medium 2026-11-02 Not applicable No public exploit In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59021 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59020 Medium 2026-11-02 Not applicable No public exploit In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59016 High 2026-11-02 Not applicable No public exploit In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59015 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59014 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59012 Medium 2026-11-02 Not applicable No public exploit In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59011 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59010 Medium 2026-11-02 Not applicable No public exploit In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59008 Medium 2026-11-02 Not applicable No public exploit In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59007 Medium 2026-11-02 Not applicable No public exploit In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59006 Medium 2026-11-02 Not applicable No public exploit In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-59005 High 2026-11-02 Not applicable No public exploit In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59004 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59003 Medium 2026-11-02 Not applicable No public exploit In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59002 Medium 2026-11-02 Not applicable No public exploit In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59001 Medium 2026-11-02 Not applicable No public exploit In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59000 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58997 Medium 2026-11-02 Not applicable No public exploit In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58995 High 2026-11-02 Not applicable No public exploit In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58994 High 2026-11-02 Not applicable No public exploit In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58990 Medium 2026-11-02 Not applicable No public exploit In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58989 High 2026-11-02 Not applicable No public exploit In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58988 Medium 2026-11-02 Not applicable No public exploit In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58986 High 2026-11-02 Not applicable No public exploit In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58985 Medium 2026-11-02 Not applicable No public exploit In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58984 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58979 High 2026-11-02 Not applicable No public exploit In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58978 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58977 Medium 2026-11-02 Not applicable No public exploit In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58976 Medium 2026-11-02 Not applicable No public exploit In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58975 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58974 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58971 Medium 2026-11-02 Not applicable No public exploit In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58970 High 2026-11-02 Not applicable No public exploit In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58969 Medium 2026-11-02 Not applicable No public exploit In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58968 Critical 2026-11-02 Not applicable No public exploit In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58966 High 2026-11-02 Not applicable No public exploit In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58965 High 2026-11-02 Not applicable No public exploit In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58964 High 2026-11-02 Not applicable No public exploit In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58963 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58962 High 2026-11-02 Not applicable No public exploit In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58961 High 2026-11-02 Not applicable No public exploit In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58957 High 2026-11-02 Not applicable No public exploit In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58956 High 2026-11-02 Not applicable No public exploit In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58955 Medium 2026-11-02 Not applicable No public exploit In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58953 Medium 2026-11-02 Not applicable No public exploit In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58951 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58949 High 2026-11-02 Not applicable No public exploit In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58946 High 2026-11-02 Not applicable No public exploit In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58945 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58944 High 2026-11-02 Not applicable No public exploit In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58943 High 2026-11-02 Not applicable No public exploit In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58942 High 2026-11-02 Not applicable No public exploit In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58938 High 2026-11-02 Not applicable No public exploit In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58937 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58936 Critical 2026-11-02 Not applicable No public exploit In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58934 High 2026-11-02 Not applicable No public exploit In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58933 Medium 2026-11-02 Not applicable No public exploit In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58930 High 2026-11-02 Not applicable No public exploit An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, inject spoofed UI elements into the trusted SystemUI Quick Controls panel, and gain a Background Activity Launch (BAL) grant from SystemUI when the user interacts with the spoofed element.
CVE-2026-58927 Medium 2026-11-02 Not applicable No public exploit The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a torn `weak_ptr` state, leading to a virtual call through a freed object's vtable at `cameraObj->getCameraInfo(&desc)`. This allows for potential arbitrary code execution within the `hal_evs_default` process.
CVE-2026-58926 Low 2026-11-02 Not applicable No public exploit A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using it. This race condition, triggered via `doneWithFrame` and `setMaxFramesInFlight`, enables an attacker to manipulate freed heap memory, potentially leading to the leakage of file descriptors from the EVS HAL process.
CVE-2026-58925 High 2026-11-02 Not applicable No public exploit The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigger this UAF by making concurrent calls to `setExtendedInfo` and `getExtendedInfo`, potentially enabling code execution within the privileged HAL process.
CVE-2026-58924 High 2026-11-02 Not applicable No public exploit The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within the HAL process's heap. The read data is then exfiltrated back to the attacker, potentially leaking sensitive information like pointers and buffer handles.
CVE-2026-58915 Medium 2026-11-02 Not applicable No public exploit A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for a secure passenger user (User N) without authenticating. This bypasses the PassengerKeyguard because the HUN system only checks the global keyguard state, which is tied to the driver's unlocked display, and the PassengerKeyguard implementation fails to suppress HUNs or intercept action PendingIntents. Consequently, private notification data is disclosed, and user-N actions are executed without credential verification.
CVE-2026-58886 High 2026-11-02 Not applicable No public exploit In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-58885 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58884 High 2026-11-02 Not applicable No public exploit In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58883 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58882 High 2026-11-02 Not applicable No public exploit In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58879 High 2026-11-02 Not applicable No public exploit In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58877 Medium 2026-11-02 Not applicable No public exploit In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58876 Critical 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58875 Medium 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58873 High 2026-11-02 Not applicable No public exploit In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58871 High 2026-11-02 Not applicable No public exploit In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58870 Medium 2026-11-02 Not applicable No public exploit In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58868 Critical 2026-11-02 Not applicable No public exploit In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58867 High 2026-11-02 Not applicable No public exploit In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58866 High 2026-11-02 Not applicable No public exploit In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58857 High 2026-11-02 Not applicable No public exploit In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58853 High 2026-11-02 Not applicable No public exploit In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58847 High 2026-11-02 Not applicable No public exploit In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58845 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58844 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58838 Medium 2026-11-02 Not applicable No public exploit In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58837 High 2026-11-02 Not applicable No public exploit In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58836 High 2026-11-02 Not applicable No public exploit In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded application to modify the package source during a self-update due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58829 High 2026-11-02 Not applicable No public exploit In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58828 High 2026-11-02 Not applicable No public exploit In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58827 High 2026-11-02 Not applicable No public exploit In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
‹ prev page 1 of 86 next ›