CVE-2026-58968: Google Android: In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free

In oapvdvlcmetadata of oapvvlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58977: Google Android: In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check

In isvalidheader of timedcacheitem.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59006: Google Android: In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-58926: Google Android: A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`…

A Use-After-Free UAF vulnerability exists in the EVS HAL, allowing a privileged client to free a bufferhandlet while the producer thread is still using it. This race condition, triggered via doneWithFrame and setMaxFramesInFlight, enables an attacker to manipulate freed heap memory, potentially...

CVE-2026-58933: Google Android: In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code

In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58937: Google Android: In multiple locations, there is a possible persistent denial of service due to improper input validation

In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58930: Google Android: An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when…

An unprivileged application can exploit a lack of package/signature validation in SystemUI's RemoteQCController when resolving a hardcoded content:// URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, inject spoofed UI elements into the trusted...

CVE-2026-58882: Google Android: In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow

In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58949: Google Android: In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer…

In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58951: Google Android: In multiple locations, there is a possible permission bypass due to a missing permission check

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58884: Google Android: In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy

In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58886: Google Android: In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code

In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-58943: Google Android: In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy

In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58945: Google Android: In multiple locations, there is a possible side channel information leak due to improperly used crypto

In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59045: Google Android: In multiple locations, there is a possible memory corruption due to a race condition

In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59008: Google Android: In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource…

In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59011: Google Android: In multiple locations, there is a possible permission bypass due to a logic error in the code

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59022: Google Android: In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code

In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55288: Google Android: In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception

In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58961: Google Android: In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a…

In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...