CVE-2026-58984: Google Android: In multiple locations, there is a possible memory corruption due to a use-after-free

In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-135714

Name of the Vulnerable Software and Affected Versions Google Android Framework versions 14 through 17 Description An out-of-bounds write due to a heap buffer overflow exists in the onOutputReceived function within FrameDecoder.cpp. This flaw allows for remote code execution without requiring...

CVE-2026-58976: Google Android: In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code

In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-135801

A physical occupant on an Android Automotive OS AAOS Multi-User Multi-Display MUMD passenger display can view sensitive Heads-Up Notification HUN content and execute actions for a secure passenger user User N without authenticating. This bypasses the PassengerKeyguard because the HUN system only...

CVE-2026-55272: Google Android: In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation

In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55263: Google Android: In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent…

In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitati...

CVE-2026-55264: Google Android: In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused…

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58824: Google Android: In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check

In pkvmloadtracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58871: Google Android: In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow

In settype4frameclassifier of staiface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58837: Google Android: In multiple locations, there is a possible background activity launch due to a logic error in the code

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58845: Google Android: In multiple locations, there is a possible out of bounds write due to an integer overflow

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58847: Google Android: In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code

In kvmvfiopviommuattach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58826: Google Android: In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free

In ksysunshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58963: Google Android: In multiple locations, there is a possible denial of service due to improper input validation

In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58985: Google Android: In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code

In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58990: Google Android: In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow

In l2cfcrprocesspeercfgreq of l2cfcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59004: Google Android: In multiple locations, there is a possible permission bypass due to an uncaught exception

In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58994: Google Android: In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check

In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59000: Google Android: In multiple locations, there is a possible permission bypass due to a confused deputy

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59001: Google Android: In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the…

In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...