PT-2026-4715

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions within ubsan throwing runtime.cpp. This flaw allows a remote attacker to cause a system crash, resulting in a denial of service without...

PT-2026-4709

In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-4693

Name of the Vulnerable Software and Affected Versions CompanionDeviceManagerService.java affected versions not specified Description A logic error in the onStart function of CompanionDeviceManagerService.java may allow for a confused deputy condition. This could result in local escalation of...

PT-2026-4689

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2026-4707

Name of the Vulnerable Software and Affected Versions ManagedServices affected versions not specified Description An issue exists in the setPackageOrComponentEnabled function of ManagedServices.java related to improper input validation. This can result in a notification policy desync, potentially...

PT-2026-4691

Name of the Vulnerable Software and Affected Versions Android devices with MDM affected versions not specified Description A logic error in the performPreInstallChecks function within InstallRepository.kt allows for a bypass of the Mobile Device Management MDM policy. This flaw enables local...

PT-2026-4698

Name of the Vulnerable Software and Affected Versions versions prior to the fixed version affected versions not specified Description A logic error in the code within BiometricService.java’s onChange function may allow enabling fingerprint unlock. This could result in local privilege escalation...

PT-2026-4688

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48645 Description An issue exists in the loadDescription function of DeviceAdminInfo.java related to improper input validation. This could allow for a persistent package, potentially leading to local escalation of...

PT-2026-4692

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48653 Description A logic error in the code within the loadDataAndPostValue function of multiple files may allow for obscured permission usage. This could result in local escalation of privilege without requiring...

PT-2026-4714

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions within ubsan throwing runtime.cpp. This issue can result in a persistent denial of service and may allow a local attacker to achieve escalatio...

PT-2026-4713

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description Multiple functions within ubsan throwing runtime.cpp are subject to resource exhaustion, which can result in a persistent local denial of service. This issue can be triggered without requirin...

PT-2026-4702

Look at the security patch preview section of https://t.co/ySklSke3uy. These are from the upcoming patch levels: Critical: CVE-2026-0039, CVE-2026-0040, CVE-2026-0041, CVE-2026-0042, CVE-2026-0043, CVE-2026-0044 High: CVE-2025-22424, CVE-2025-22426, CVE-2025-32348, CVE-2025-48561, CVE-2025-48615,...

PT-2026-4697

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description In the updateProvidersWhenServiceRemoved function of CredentialManagerService.java, a permissions bypass allows settings to be overridden across different users. This flaw can lead ...

PT-2026-4704

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0024 Description A missing permission check in the isRedactionNeededForOpenViaContentResolver function within MediaProvider.java may allow revealing the location of media. This could result in local information disclosur...

PT-2026-4710

Name of the Vulnerable Software and Affected Versions GrapheneOS versions prior to 2026030200 Description An integer overflow in multiple functions within ubsan throwing runtime.cpp can lead to a persistent denial of service. This issue allows for remote denial of service without requiring...

PT-2026-4700

Name of the Vulnerable Software and Affected Versions Versions prior to 2026-0020 Description A flaw exists in the parsePermissionGroup function within ParsedPermissionUtils.java that may allow bypassing a consent dialog to obtain permissions. This could result in local escalation of privilege...

PT-2026-4696

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-4703

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the PackageInstallerService.java component, specifically within the createSessionInternal function. This issue allows an application to potentially alter its ownership due to...

PT-2026-4695

Name of the Vulnerable Software and Affected Versions versions prior to the fixed version affected versions not specified Description A flaw exists in the isPackageNullOrSystem function within the AppOpsService.java file. This issue involves improper input validation, potentially leading to a...

PT-2026-4687

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A persistent denial of service may occur due to improper input validation. This can result in a local denial of service without requiring additional execution privileges or use...