84857 matches found
PT-2026-57471
In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57458
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57456
In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57463
In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57473
In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57465
In dec frm prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57454
A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...
PT-2026-57469
In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-57479
🚨 HIGH SEVERITY: CVE-2026-28650 CVSS 7.8 Android WindowState.java logic error enables overlay bypass → local privilege escalation. No user interaction required. Affected: Android OS Impact: Full device compromise CVE Vulnerability PatchNow https://t.co/9fjJKvkz9L...
WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Austin Ginder in WordPress Plugin WP Google Maps Pro versions = 10.1.02...
GHSA-5G46-HMW3-W78X vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-5QWX-4Q7J-HWM2 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-7M9Q-85QJ-RC4G vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
CVE-2026-53269 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-Q96W-JFJR-XWW5 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
GHSA-VQ3G-6QWH-5WJ2 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
CVE-2026-53258 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...
CVE-2026-53250 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-qemu, linux-gcp...