97381 matches found
Exploit for Race Condition in Canonical Ubuntu_Linux
Lenovo IdeaTab A1000G — Root Note: This documentation a...
PT-2026-57449
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57473
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in multiple functions of XmpDataParser.java causes improper data sanitization. This issue allows for local information disclosure without requiring...
PT-2026-57460
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57452
In validate camera metadata structure of camera metadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57466
Name of the Vulnerable Software and Affected Versions BleRssiRangingCapabilities.java affected versions not specified Description A missing permission check in the writeToParcel function of BleRssiRangingCapabilities.java allows for the retrieval of the Bluetooth MAC address. This issue enables...
PT-2026-57472
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the handleUssdRequest function within PhoneInterfaceManager.java allows the transmission of USSD requests without the required permissions. This flaw enables local escalation...
PT-2026-57468
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description In the onCreate function of ContactsPickerActivity.kt, a tapjacking or overlay attack can create a misleading user interface. This issue allows for local...
PT-2026-57474
Name of the Vulnerable Software and Affected Versions Android NFC component affected versions not specified Description A logic error in the rw mfc handle read op function within rw mfc.cc allows for an out-of-bounds write. This condition can be exploited to achieve local escalation of privilege...
PT-2026-57471
Name of the Vulnerable Software and Affected Versions VoiceInteractionManagerService affected versions not specified Description A resource exhaustion issue exists in the initForUserNoTracing function within VoiceInteractionManagerService.java. This flaw allows for a persistent local denial of...
PT-2026-57469
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description In the buildMiniResolver function of IntentForwarderActivity.java, a consent bypass is possible through a tapjacking or overlay attack. Tapjacking occurs when a malicious application overlays...
PT-2026-57479
Name of the Vulnerable Software and Affected Versions Android OS affected versions not specified Description A logic error in the setHiddenWhileSuspended function within WindowState.java allows for an overlay bypass. This flaw enables local escalation of privilege without requiring additional...
PT-2026-57451
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
PT-2026-57454
A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...
PT-2026-57478
A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...
xpad2-ionstack-poc
xpad2-ionstack-poc Pure-C, host-assisted re-root proof of con...
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking
Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail at the basics people install a VPN for, i.e., keeping their traffic private and secure. The apps flagged with at least one problem have been installed more than 2.4...
CVE-2026-21055
Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege...
