CVE-2026-28613

CVE-2026-28613 affects Android (per the Android Security Bulletin 2026-09-01 ). The vulnerability resides in the initAppLinkTypeAndIntent function of ChannelImpl.java , where improper input validation allows an arbitrary intent to be launched , leading to local privilege escalation with no additi...

CVE-2026-28612

CVE-2026-28612 is a local escalation of privilege vulnerability in Android's ActivityStarter.java (specifically the resolveActivity method), caused by a logic error that enables Intent Redirection attacks. No additional execution privileges or user interaction are required to exploit it, yielding...

CVE-2026-28611

CVE-2026-28611 is a vulnerability in Android's NfcService.java where a missing permission check in multiple functions enables a silent NFC payment session hijacking , leading to local privilege escalation with no additional execution privileges or user interaction required. The CVSS 3.1 score is ...

CVE-2026-28609

CVE-2026-28609 is an out-of-bounds write vulnerability in MatroskaExtractor.cpp , caused by improper casting during a read operation. It can lead to remote code execution with low privileges required and no user interaction needed, rated CVSS 8.8 (HIGH) . The vulnerability is tracked in the Andro...

CVE-2026-28607

CVE-2026-28607 is a local elevation of privilege vulnerability in the Android Framework component, caused by a background activity launch bypass due to a confused deputy in multiple functions across multiple locations. No additional execution privileges or user interaction are required for exploi...

CVE-2026-28606

CVE-2026-28606 is a logic error in the handleBondStateChanged method of Android's AdapterService.java , which allows an attacker to skip Bluetooth pairing and achieve remote escalation of privilege without user consent, without additional execution privileges, and without user interaction. The CN...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...

CVE-2026-28603

CVE-2026-28603 is a local escalation of privilege vulnerability in the Android system component AppRestrictionsFragment.java, specifically in the assertSafeToStartCustomActivity method. The root cause is a confused deputy flaw that permits read/write access to private files. Exploitation requires...

CVE-2026-28602

CVE-2026-28602 is a logic error in ClipboardService.java (method setClipboardAccessNotificationsEnabledForUser) within the Android Framework component that can break multi-user isolation , leading to local escalation of privilege . No additional execution privileges or user interaction are requir...

CVE-2026-28600

CVE-2026-28600 is a confused deputy vulnerability in the Android payment framework , specifically in the onCreate method of PaymentDefaultDialog.java. An attacker can change the device's default payment app without additional execution privileges or user interaction, enabling a local escalation o...

CVE-2026-28599

CVE-2026-28599 is an Intent Redirection Bypass in the addCreatorToken method of ActivityManagerService.java within the Android Framework component, caused by a logic error . It enables local escalation of privilege with no additional execution privileges and no user interaction required, scored C...

CVE-2026-28596

CVE-2026-28596 is a permanent denial of service vulnerability in the Android Framework component, specifically in the parseInterventionFromXml method of GameManagerService.java. The root cause is resource exhaustion , which can lead to a permanent DoS. Exploitation requires a local attacker with ...

CVE-2026-28594

CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error present in multiple locations. It enables local privilege escalation without requiring additional execution privileges or user interaction, rated CVSS 7.8 (High) . The affected AOSP versio...

CVE-2026-28593

CVE-2026-28593 is a local privilege escalation vulnerability in Android , located in the getItemList method of SettingsFragment.java . The root cause is a user interaction bypass due to misleading or insufficient UI, allowing an attacker with low privileges to escalate without further user intera...

CVE-2026-28590

CVE-2026-28590 is an improper encryption key validation vulnerability in the Android core operating system and Media Framework , caused by a logic error in the code. It enables local privilege escalation with no additional execution privileges required and no user interaction. The vulnerability c...

CVE-2026-28584

CVE-2026-28584 is a local denial-of-service vulnerability in the Android Framework component, specifically in createSessionInternal of PackageInstallerService.java, caused by a logic error that can permanently DoS the device. Exploitation requires only low privileges and no user interaction. The ...

CVE-2026-28583

CVE-2026-28583 is an out-of-bounds write in the validate_camera_metadata_structure function of camera_metadata.c (Android Camera HAL), caused by a logical error. It enables local privilege escalation with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (High) with ...

CVE-2026-28582

CVE-2026-28582 is a missing permission check in the onCreate method of ConfirmDeviceCredentialActivity.java on Android , allowing a local attacker with low privileges (no user interaction required) to read or modify device credentials , resulting in local information disclosure. NVD rates it CVSS...

CVE-2026-28572

CVE-2026-28572 is an elevation of privilege vulnerability in the Android Framework component, specifically in the onCreate method of InstallLaunch.kt. A tapjacking/overlay attack can produce a misleading UI, enabling a local attacker to escalate privileges with no additional execution privileges ...

CVE-2026-0084

CVE-2026-0084 is a local privilege escalation vulnerability in the Android framework , specifically in multiple functions of HostEmulationManager.java. A logic error permits an unintended background activity launch, allowing a local attacker to escalate privileges with no additional execution pri...