The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the loadSafeLabel() function in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the loadSafeLabel function in Android operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the onNullBinding method in the HostEmulationManager.java class of Android operating systems allows a hacker to exploit their privileges.

The vulnerability of the onServiceConnected method in Android operating systems arises due to a race condition. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component allows a perpetrator to increase their privileges.

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the performPreInstallChecks() function in the InstallRepository.kt script of the Android operating system’s Framework component allows a malicious actor to escalate their privileges.

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the isSameApp method in the NotificationManagerService.java class of Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the `updateState` method in the `GraphicsDriverEnableAngleAsSystemDriverController.java` class in Android operating systems allows a hacker to cause a service failure.

The vulnerability of the updateState method in the GraphicsDriverEnableAngleAsSystemDriverController.java class in Android operating systems is related to incorrect handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the UBSAN_throwing_runtime.cpp script of Android operating systems allows a hacker to cause a service failure.

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to the lack of a standardized mechanism for handling errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability in the UBSAN_throwing_runtime.cpp script of Android operating systems allows a hacker to cause a service failure.

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the KeyChainActivity component in Android operating systems allows attackers to escalate their privileges.

The vulnerability of the KeyChainActivity component in Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework allows a hacker to escalate their privileges.

The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-11007: Improper Input Validation

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10967: Use After Free

Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-46608

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A use after free issue in WebView allows a remote attacker to potentially exploit heap corruption, which occurs when a program continues to use a pointer after it has been...

PT-2026-46482

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A use after free issue in Core allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. Use aft...

PT-2026-46610

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A race condition in the GPU component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved...

CVE-2026-11012: Use After Free

Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

PT-2026-46675

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in Payments allows a local attacker to leak cross-origin data, which is data from a different origin than the one that initiated the request, ...

PT-2026-46600

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description A use after free issue exists in the WebView component, which allows a local attacker to execute arbitrary code by utilizing a malicious file. Use after free is a memory...

CVE-2026-11025: Client-Side Enforcement of Server-Side Security

Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...