CVE-2026-58874

CVE-2026-58874 is a local privilege escalation vulnerability in Android's SmsController.java , caused by a missing permission check in multiple functions. An attacker with local access and low privileges can exploit it without user interaction to achieve full compromise of confidentiality, integr...

EUVD-2026-74028

In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74024

In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58823

CVE-2026-58823 affects the Android platform, as indicated by the Android Security Bulletin reference (ASB-A-522376080, 2026-09-01). The vulnerability is a missing bounds check in the stpropnci_process_std function within stpropnci_std.cc, causing a memory safety issue. An attacker with local, low...

CVE-2026-55290

CVE-2026-55290 is an out-of-bounds heap read vulnerability in the setTo function of ResourceTypes.cpp in Android. The root cause is a missing bounds check , which can lead to local information disclosure without requiring additional execution privileges or user interaction. The vulnerability is t...

EUVD-2026-74020

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-74019

In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55285

CVE-2026-55285 is an out-of-bounds write vulnerability in the openLogicalChannel function across multiple files within Android , as indicated by its inclusion in the Android Security Bulletin 2026-09-01 . The root cause is a missing bounds check , which can lead to local privilege escalation with...

CVE-2026-55277

CVE-2026-55277 affects Android in the checkUiccListenConfigNeeded function within RoutingManager.cpp . The root cause is a missing bounds check that allows an out-of-bounds write , potentially leading to remote (proximal/adjacent) code execution with no additional privileges required and no user ...

EUVD-2026-74000

In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45521

CVE-2026-45521 affects the openFile method in AppFuseBridge.java , where a missing permission check can lead to a local information disclosure . No additional execution privileges are required, and no user interaction is needed for exploitation. The vulnerability is referenced in the Android Secu...

CVE-2026-28652

CVE-2026-28652 affects Android devices, specifically the RangingServiceImpl.java file where a missing permission check in multiple functions enables a possible man-in-the-middle (MITM) attack. The vulnerability can lead to remote information disclosure without requiring additional execution privi...

EUVD-2026-73984

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73970

In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28623

CVE-2026-28623 is a High -severity information disclosure vulnerability in Android's Bluetooth subsystem. The flaw resides in the writeToParcel method of BleRssiRangingCapabilities.java, where a missing permission check allows a local attacker to obtain the device's Bluetooth MAC address . No add...

CVE-2026-28611

CVE-2026-28611 affects Android's NFC service , specifically multiple functions within NfcService.java . A missing permission check enables silent payment session hijacking , leading to a local escalation of privilege with no additional execution privileges required and no user interaction needed ...

EUVD-2026-73961

In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73946

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2026-28582

CVE-2026-28582 is a High -severity vulnerability in the Android component ConfirmDeviceCredentialActivity.java . The root cause is a missing permission check in the onCreate method, allowing a local attacker to unauthorized access and modify device credentials without additional execution privile...

CVE-2026-0054

CVE-2026-0054 is a local information disclosure vulnerability in Android's WalletContextualLocationsService.kt , specifically in the isCallerAllowed method. A missing permission check allows an attacker to obtain wallet information without requiring additional execution privileges or user interac...