CVE-2026-28656

CVE-2026-28656 affects Android and involves a possible permission bypass caused by a tapjacking/overlay attack in multiple locations within the platform. The vulnerability can lead to local privilege escalation from User execution privileges, with user interaction required for exploitation. A ref...

EUVD-2026-73987

In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-28655

CVE-2026-28655 affects multiple functions in RemoteViews.java within Android, where a logic error permits a background activity launch bypass . The result is a local escalation of privilege requiring no additional execution privileges and no user interaction. The vulnerability is referenced in th...

EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73985

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28653

CVE-2026-28653 affects Android and resides in the file rw_t3t.cc , where multiple functions contain a possible out-of-bounds write caused by an integer overflow . The impact is a local escalation of privilege with no additional execution privileges required and no user interaction needed for expl...

CVE-2026-28650

A logic error in the setHiddenWhileSuspended method of WindowState.java in Android allows an overlay bypass , leading to local escalation of privilege with no additional execution privileges and no user interaction required. The vulnerability is rated High severity in Samsung's July 2026 Security...

EUVD-2026-73983

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73982

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28644

CVE-2026-28644 is a permission bypass vulnerability in the startNextMatchingActivity method of ActivityTaskManagerService.java in the Android system. The root cause is a confused deputy flaw, enabling a local escalation of privilege with no additional execution privileges required and no user int...

EUVD-2026-73981

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28642

CVE-2026-28642 is a High -severity vulnerability in the Android System framework, specifically in executeRequest of ActivityStarter.java. A logic error allows a background activity launch , enabling local escalation of privilege with no additional execution privileges and no user interaction requ...

EUVD-2026-73980

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

CVE-2026-28639 is a critical out-of-bounds write vulnerability in the Android system, located in the function rw_mfc_handle_read_op within rw_mfc.cc. The root cause is a logic error in the code. Exploitation requires no additional execution privileges and no user interaction , enabling a local es...

EUVD-2026-73978

In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28636

CVE-2026-28636 is a confused deputy vulnerability in the setupLayout method of PickActivity.java within Android. It allows a bypass of the "Install unknown apps" security restriction, leading to local escalation of privilege with no additional execution privileges required and no user interaction...

EUVD-2026-73977

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28634

CVE-2026-28634 is a local escalation of privilege vulnerability in PhoneInterfaceManager.java (handleUssdRequest) within the Android framework. A logic error allows a caller to send a USSD request without the required permission, enabling privilege escalation with no additional execution privileg...

EUVD-2026-73975

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28631

CVE-2026-28631 is a High -severity vulnerability in Android's IntentForwarderActivity.java , specifically in the buildMiniResolver method. The root cause is a tapjacking/overlay attack that enables a consent bypass , leading to local escalation of privilege without requiring additional execution ...