PT-2026-87217

Alert for IT teams: Microsoft just patched a severe info-disclosure flaw in Teams for Android CVE-2026-65812 that could leak credentials. The bug allows attackers with low privileges to trick a user into interacting with crafted content over the network. Defenders need to verify that Android...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

EUVD-2026-72957

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

PT-2026-88224

🚨 HIGH severity CVE-2026-28655 CVSS 7.8 Android RemoteViews.java logic error enables background activity launch bypass → local privilege escalation. No user interaction required. Affected: Android OS Patch immediately. CVE Vulnerability PatchNow https://t.co/w436UcWTfE...

PT-2026-88522

The following issues are included in Project Mainline components. Subcomponent CVE ART CVE-2026-28664 Media Framework components CVE-2026-28609, CVE-2026-45527 Documents UI CVE-2026-28636 Media Codecs CVE-2026-28618, CVE-2026-55294 Media Provider CVE-2026-28622, CVE-2026-28638, CVE-2026-28671,...

PT-2026-88221

In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Android XR Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

The XR Security Bulletin contains details of security vulnerabilities affecting the XR platform. The full XR update comprises the security patch level of 2026-09-05 or later from the September 2026 Android Security Bulletin in addition to all issues in this bulletin. We encourage all customers to...

Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Source code patches...

PT-2026-87176

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-78997

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314 ) is affected by a Universal Cross-Site Scripting vulnerability. The root cause is a reflected XSS on a UC-owned domain that leverages the browser's internal JavaScript bridge to register a deferred callback. This allows an at...

KLA91262 PE vulnerabilities in Microsoft Apps

Privilege escalation vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Xbox Gaming Services can be exploited remotely to gain privileges. 2...

CVE-2026-78325

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

EUVD-2026-72354

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

CVE-2026-78325

CVE-2026-78325 is a cross-site scripting (XSS) vulnerability in the Evernote and Google Keep note importers of Standard Notes for Android through version 3.201.24 . An attacker can craft a malicious .enex or Google Keep HTML file that, when imported by a victim, executes arbitrary JavaScript in t...

CVE-2026-78325 XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import

Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Google Keep HTML file, leading to theft of encryption keys and...

Aegis v3.4.3

Aegis Authenticator Aegis Authenticator is a free, secure and open source 2FA app for Android. It aims to provide a secure authenticator for your online services, while also including some features missing in existing authenticator apps, like proper encryption and backups. Aegis supports HOTP and...

CVE-2020-0023

CVE-2020-0022 Seems like Android 9-6 have similar Bluetooth subsystem, Android 5 and 4 are different. Android 9.0 BlueFrag experiments Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Below I hit the patched condition. OK I think I got it, but...

PhoneSploit-Pro v2.3

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

Malicious code in qoeoe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e6c0c50dfb4a99c6e8b2ca640cadd33877e737479d8739d5db5b39271bc967 The package ships a single module qoeoe/starts.py whose entire body is a lambda that base64-decodes a reversed 108 KB string literal and passes the...

MAL-2026-15927 Malicious code in qoeoe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e6c0c50dfb4a99c6e8b2ca640cadd33877e737479d8739d5db5b39271bc967 The package ships a single module qoeoe/starts.py whose entire body is a lambda that base64-decodes a reversed 108 KB string literal and passes the...