CVE-2026-28650

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28650

A logic error in the setHiddenWhileSuspended function of WindowState.java within the Android Framework component enables a possible overlay bypass . This vulnerability could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. Remedi...

EUVD-2026-73983

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28644

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28644

A permission bypass vulnerability exists in ActivityTaskManagerService.java within the startNextMatchingActivity function. This flaw is caused by a confused deputy issue, which could allow for local escalation of privilege (EoP) without requiring additional execution privileges. Exploitation does...

EUVD-2026-73982

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

A logic error in the rw_mfc_handle_read_op function within rw_mfc.cc causes a possible out of bounds write in the Android System framework . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details...

CVE-2026-28634

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28631

The Android Framework component is vulnerable to a consent bypass within the buildMiniResolver of IntentForwarderActivity.java . This vulnerability can be triggered via a tapjacking/overlay attack , potentially leading to a local escalation of privilege without requiring additional execution priv...

CVE-2026-28631

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73975

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28626

In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-73971

In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28624

A confused deputy vulnerability in Android allows unauthorized read/write access to files in multiple locations. This flaw enables a local attacker to achieve elevation of privilege without requiring additional execution privileges or user interaction. This issue is addressed in the July 2026 sec...

CVE-2026-28620

In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28620

CVE-2026-28620 is a high-severity vulnerability affecting the Framework component of the Android operating system. The issue stems from a permissions bypass that allows for unauthorized URI access in multiple locations. Successful exploitation could result in a local escalation of privilege (EoP)...

CVE-2026-28616

In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73965

In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28616

The Setup Wizard contains a confused deputy vulnerability that allows an attacker to force a connection to a malicious network. This flaw can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. While the vulnerability is documented across...