Browse All CVEs
50,472 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-58867 |
high | 8.4 | 0.0008 | 2026-11-02 | In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a | |
CVE-2026-58866 |
high | 8.4 | 0.0009 | 2026-11-02 | In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possibl | |
CVE-2026-58857 |
high | 8.1 | 0.0027 | 2026-11-02 | In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race conditio | |
CVE-2026-58853 |
high | 7.5 | 0.0036 | 2026-11-02 | In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a m | |
CVE-2026-58847 |
high | 8.4 | 0.0010 | 2026-11-02 | In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error | |
CVE-2026-58845 |
high | 8.4 | 0.0011 | 2026-11-02 | In multiple locations, there is a possible out of bounds write due to an integer overflow. | |
CVE-2026-58844 |
high | 8.4 | 0.0016 | 2026-11-02 | In multiple locations, there is a possible out of bounds read/write due to an incorrect bo | |
CVE-2026-58838 |
medium | 4.0 | 0.0007 | 2026-11-02 | In multiple functions of Helpers.java, there is a possible information disclosure due to i | |
CVE-2026-58837 |
high | 8.4 | 0.0010 | 2026-11-02 | In multiple locations, there is a possible background activity launch due to a logic error | |
CVE-2026-58836 |
high | 7.8 | 0.0010 | 2026-11-02 | In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Con | |
CVE-2026-58829 |
high | 8.4 | 0.0011 | 2026-11-02 | In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use afte | |
CVE-2026-58828 |
high | 8.4 | 0.0018 | 2026-11-02 | In multiple functions of base.c, there is a possible use-after-free due to a race conditio | |
CVE-2026-58827 |
high | 8.4 | 0.0011 | 2026-11-02 | In multiple functions of dma-buf.c, there is a possible use after free due to a race condi | |
CVE-2026-58826 |
high | 8.4 | 0.0018 | 2026-11-02 | In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. | |
CVE-2026-58825 |
high | 8.4 | 0.0011 | 2026-11-02 | In multiple functions of fork.c, there is a possible use after free due to a logic error i | |
CVE-2026-58824 |
high | 8.4 | 0.0011 | 2026-11-02 | In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incor | |
CVE-2026-58821 |
medium | 6.2 | 0.0009 | 2026-11-02 | In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access | |
CVE-2026-58817 |
medium | 6.2 | 0.0007 | 2026-11-02 | In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent de | |
CVE-2026-58814 |
high | 7.5 | 0.0028 | 2026-11-02 | In parseContentType of PduParser.java, there is a possible denial of service due to an int | |
CVE-2026-55292 |
medium | 5.3 | 0.0022 | 2026-11-02 | In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer un | |
CVE-2026-55289 |
high | 8.4 | 0.0009 | 2026-11-02 | In multiple functions in multiple locations, there is a possible execution of sensitive US | |
CVE-2026-55288 |
high | 8.4 | 0.0008 | 2026-11-02 | In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service du | |
CVE-2026-55287 |
high | 8.4 | 0.0010 | 2026-11-02 | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick t | |
CVE-2026-55283 |
high | 8.4 | 0.0016 | 2026-11-02 | In multiple locations, there is a possible memory safety issue due to a use-after-free. Th | |
CVE-2026-55275 |
high | 8.4 | 0.0016 | 2026-11-02 | In multiple locations, there is a possible use-after-free due to a race condition. This co | |
CVE-2026-55272 |
medium | 6.2 | 0.0009 | 2026-11-02 | In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to im | |
CVE-2026-55271 |
high | 8.4 | 0.0009 | 2026-11-02 | In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible i | |
CVE-2026-55264 |
medium | 4.0 | 0.0007 | 2026-11-02 | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible informati | |
CVE-2026-55263 |
high | 8.4 | 0.0008 | 2026-11-02 | In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstan | |
CVE-2026-55262 |
high | 8.4 | 0.0010 | 2026-11-02 | In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, | |
CVE-2026-55261 |
high | 8.4 | 0.0008 | 2026-11-02 | In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code | |
CVE-2026-55257 |
high | 8.4 | 0.0010 | 2026-11-02 | In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to mislea | |
CVE-2026-49935 |
medium | 4.0 | 0.0011 | 2026-11-02 | In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypa | |
CVE-2026-49934 |
high | 7.8 | 0.0008 | 2026-11-02 | In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code executio | |
CVE-2026-49931 |
high | 8.4 | 0.0009 | 2026-11-02 | In onActivityResult in multiple locations, there is a possible contact leak from protected | |
CVE-2026-49924 |
medium | 6.2 | 0.0007 | 2026-11-02 | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via un | |
CVE-2026-49923 |
high | 8.4 | 0.0010 | 2026-11-02 | In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI iss | |
CVE-2026-49922 |
high | 8.4 | 0.0010 | 2026-11-02 | In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible per | |
CVE-2026-49912 |
medium | 4.0 | 0.0008 | 2026-11-02 | In multiple functions of MediaCarouselController.kt, there is a possible way for media to | |
CVE-2026-45514 |
high | 8.4 | 0.0010 | 2026-11-02 | In multiple functions of SaveUi.java, there is a possible bypass of package installation r | |
CVE-2026-28665 |
high | 8.4 | 0.0009 | 2026-11-02 | In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog | |
CVE-2026-28645 |
medium | 6.8 | 0.0014 | 2026-11-02 | In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated ena | |
CVE-2026-28643 |
medium | 6.2 | 0.0007 | 2026-11-02 | In multiple locations, there is a possible denial of service due to a missing permission c | |
CVE-2026-28632 |
medium | 4.0 | 0.0008 | 2026-11-02 | In multiple locations, there is a possible way to share files across profiles due to a log | |
CVE-2026-28621 |
medium | 4.0 | 0.0008 | 2026-11-02 | In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due t | |
CVE-2026-28597 |
high | 8.4 | 0.0010 | 2026-11-02 | In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permiss | |
CVE-2026-28588 |
high | 8.4 | 0.0010 | 2026-11-02 | In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way t | |
CVE-2026-0053 |
high | 8.4 | 0.0008 | 2026-11-02 | In multiple locations, there is a possible method for a primary user to disable secure nfc | |
CVE-2025-26433 |
high | 8.4 | 0.0008 | 2026-11-02 | In multiple locations, there is a possible way to trick a user into accepting a permission | |
CVE-2025-22436 |
high | 8.4 | 0.0008 | 2026-11-02 | In multiple locations, there is a possible way to trick a user into disclosing Autofill co |