CVE-2026-58844: Google Android: In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check

In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59002: Google Android: In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code

In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58885: Google Android: In multiple locations, there is a possible permission bypass due to a confused deputy

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59020: Google Android: In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition

In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59016: Google Android: In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal

In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55292: Google Android: In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow

In rwcidatacback of rwci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28597: Google Android: In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper…

In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58934: Google Android: In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error…

In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58883: Google Android: In multiple locations, there is a possible denial of service due to a logic error in the code

In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22436: Google Android: In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a…

In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58956: Google Android: In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code

In modpowF4 of avbrsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58957: Google Android: In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to…

In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49924: Google Android: In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to…

In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58827: Google Android: In multiple functions of dma-buf.c, there is a possible use after free due to a race condition

In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58915: Google Android: A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view…

A physical occupant on an Android Automotive OS AAOS Multi-User Multi-Display MUMD passenger display can view sensitive Heads-Up Notification HUN content and execute actions for a secure passenger user User N without authenticating. This bypasses the PassengerKeyguard because the HUN system only...

CVE-2026-58879: Google Android: In descramble of multiple files, there is a possible out-of-bounds write due to improper casting

In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59028: Google Android: In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy

In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49934: Google Android: In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input…

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-58942: Google Android: In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code

In dofaultaround of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59031: Google Android: In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in…

In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...