CVE-2026-28593

CVE-2026-28593 is a local privilege escalation vulnerability in Android , located in the getItemList method of SettingsFragment.java . The root cause is a user interaction bypass due to misleading or insufficient UI, allowing an attacker with low privileges to escalate without further user intera...

CVE-2026-28590

CVE-2026-28590 is an improper encryption key validation vulnerability in the Android core operating system and Media Framework , caused by a logic error in the code. It enables local privilege escalation with no additional execution privileges required and no user interaction. The vulnerability c...

CVE-2026-28584

CVE-2026-28584 is a local denial-of-service vulnerability in the Android Framework component, specifically in createSessionInternal of PackageInstallerService.java, caused by a logic error that can permanently DoS the device. Exploitation requires only low privileges and no user interaction. The ...

CVE-2026-28583

CVE-2026-28583 is an out-of-bounds write in the validate_camera_metadata_structure function of camera_metadata.c (Android Camera HAL), caused by a logical error. It enables local privilege escalation with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (High) with ...

CVE-2026-28582

CVE-2026-28582 is a missing permission check in the onCreate method of ConfirmDeviceCredentialActivity.java on Android , allowing a local attacker with low privileges (no user interaction required) to read or modify device credentials , resulting in local information disclosure. NVD rates it CVSS...

CVE-2026-28572

CVE-2026-28572 is an elevation of privilege vulnerability in the Android Framework component, specifically in the onCreate method of InstallLaunch.kt. A tapjacking/overlay attack can produce a misleading UI, enabling a local attacker to escalate privileges with no additional execution privileges ...

CVE-2026-0084

CVE-2026-0084 is a local privilege escalation vulnerability in the Android framework , specifically in multiple functions of HostEmulationManager.java. A logic error permits an unintended background activity launch, allowing a local attacker to escalate privileges with no additional execution pri...

CVE-2026-0065

CVE-2026-0065 is a local elevation of privilege vulnerability in the Android Framework component, specifically a logic error in the areBackgroundActivityStartsAllowed method of BackgroundLaunchProcessController.java that permits unintended background activity launches. Exploitation requires User-...

CVE-2026-0054

CVE-2026-0054 is an information disclosure vulnerability in the Android Framework component, specifically in the isCallerAllowed method of WalletContextualLocationsService.kt. A missing permission check allows a local attacker with low privileges to obtain wallet information without user interact...

CVE-2026-78997

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability

...

CVE-2026-65812

Microsoft Teams for Android is affected by an information disclosure vulnerability caused by the insertion of sensitive information into sent data, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.8 (Medium) , with a network attack vector, low comple...

CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability

...

EUVD-2026-73739

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

EUVD-2026-73702

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability

...

CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability

...

CVE-2026-69559

CVE-2026-69559 is an origin validation error in Microsoft Teams for Android that allows an authorized attacker to disclose information over a network. The vulnerability carries a CVSS 3.1 base score of 5.8 (Medium) with a network vector, high attack complexity, low privileges required, and user i...

Microsoft Teams for Android Information Disclosure Vulnerability

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

Microsoft Teams for Android Information Disclosure Vulnerability

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...