CVE-2026-49008

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...

CVE-2026-21023

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application...

Android Proxy Auto-Config Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Proxy Auto-Config PAC is a Script-like component. An information disclosure vulnerability exists in Android's PAC component. The vulnerability can be exploited by an...