CVE-2026-28650

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73983

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28650

A logic error in the setHiddenWhileSuspended function of WindowState.java within the Android Framework component enables a possible overlay bypass . This vulnerability could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. Remedi...

CVE-2026-28631

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73975

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28631

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28631

The Android Framework component is vulnerable to a consent bypass within the buildMiniResolver of IntentForwarderActivity.java . This vulnerability can be triggered via a tapjacking/overlay attack , potentially leading to a local escalation of privilege without requiring additional execution priv...

EUVD-2026-73974

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28630

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28630

A vulnerability exists in ContactsPickerActivity.kt (specifically within the onCreate method) where a tapjacking/overlay attack can cause a misleading UI. This flaw may lead to local information disclosure without requiring additional execution privileges or user interaction. Remediation is avail...

CVE-2026-28630

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73945

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28572

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28572

A high-severity vulnerability exists in the Android Framework component affecting Android 16-qpr2 . The issue is located in the onCreate method of InstallLaunch.kt, where a tapjacking/overlay attack can cause a misleading UI. This flaw allows for local escalation of privilege (EoP) without requir...

CVE-2026-28572

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73515

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network...

CVE-2026-69474

This vulnerability is a use after free in Windows Overlay Filter that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 4.8 (MEDIUM) , requiring network access, high complexity, low privileges, and user interaction, with a high impact on confidential...

EUVD-2026-73480

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69373

CVE-2026-69373 is an integer overflow or wraparound in the Windows Overlay Filter component that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires high privileges and local access (CVSS 3.1: 6.7 MEDIUM — AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No publi...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...