CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28606

CVE-2026-28606 is a logic error in the handleBondStateChanged method of Android's AdapterService.java , which allows an attacker to skip Bluetooth pairing and achieve remote escalation of privilege without user consent, without additional execution privileges, and without user interaction. The CN...

EUVD-2026-73957

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability in the adbd (Android Debug Bridge Daemon) component of Android, caused by a race condition in multiple locations. It permits remote code execution with no additional privileges and no user interaction. Affected versions include Android 13, 14, 15, ...

CVE-2026-28602

CVE-2026-28602 is a logic error in ClipboardService.java (method setClipboardAccessNotificationsEnabledForUser) within the Android Framework component that can break multi-user isolation , leading to local escalation of privilege . No additional execution privileges or user interaction are requir...

CVE-2026-28600

CVE-2026-28600 is a confused deputy vulnerability in the Android payment framework , specifically in the onCreate method of PaymentDefaultDialog.java. An attacker can change the device's default payment app without additional execution privileges or user interaction, enabling a local escalation o...

CVE-2026-28599

CVE-2026-28599 is an Intent Redirection Bypass in the addCreatorToken method of ActivityManagerService.java within the Android Framework component, caused by a logic error . It enables local escalation of privilege with no additional execution privileges and no user interaction required, scored C...

EUVD-2026-73951

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error present in multiple locations. It enables local privilege escalation without requiring additional execution privileges or user interaction, rated CVSS 7.8 (High) . The affected AOSP versio...

EUVD-2026-73949

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

CVE-2026-28590 is an improper encryption key validation vulnerability in the Android core operating system and Media Framework , caused by a logic error in the code. It enables local privilege escalation with no additional execution privileges required and no user interaction. The vulnerability c...

CVE-2026-28584

CVE-2026-28584 is a local denial-of-service vulnerability in the Android Framework component, specifically in createSessionInternal of PackageInstallerService.java, caused by a logic error that can permanently DoS the device. Exploitation requires only low privileges and no user interaction. The ...

EUVD-2026-73947

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28583

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73946

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

EUVD-2026-74048

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0084

CVE-2026-0084 is a local privilege escalation vulnerability in the Android framework , specifically in multiple functions of HostEmulationManager.java. A logic error permits an unintended background activity launch, allowing a local attacker to escalate privileges with no additional execution pri...

CVE-2026-0084

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0065

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...