98530 matches found
Microsoft Bing Search Android Information Representation Error
The vulnerability of Microsoft Bing Search’s search engine on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
EUVD-2026-37216
In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-50574 via yt-dlp (2025.6.30)
yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-505...
downitall-android (1.5.0), downitall-windows (1.5.0) +7 more potentially affected by CVE-2026-50023 via yt-dlp (2025.6.30)
yt-dlp PYPI version 2025.6.30 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - downitall-android 1.5.0 - downitall-windows 1.5.0 - extra-demucs =0.1.0, =3.2.3, =2.2.2, =0.1.60, =2025.7.2, =2025.7.4 Source cves: CVE-2026-500...
CVE-2026-0133
In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-12348 Address Bar Spoofing in Arc Search for Android (window.open race condition)
Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing...
CVE-2026-12348
CVE-2026-12348 concerns Arc Search for Android. The entry describes an address bar spoofing flaw caused by a window.open race condition, enabling a remote attacker to render attacker-controlled content while displaying a trusted domain in the address bar (phishing risk). The CVSSv3.1 vector is pr...
CVE-2026-12348 Address Bar Spoofing in Arc Search for Android (window.open race condition)
Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing...
CVE-2026-0142
In iavbparsekeydata of avbrsa.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0133
In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0133
A missing permission check in the smmu_attach_dev function of arm-smmu-v3.c allows for the signing of malicious Android Runtime bootclass artifacts . This vulnerability can be exploited to achieve local escalation of privilege without requiring additional execution privileges or user interaction....
New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla , that targets 217 banking and cryptocurrency apps and packs 137 remote commands. Together, they give an operator near-total control of an infected phone: it lifts lock-screen PINs, reads and sends...
New Rokarolla Android Trojan Found Targeting 217 Crypto and Banking Apps
Zimperium researchers discover a new mobile Trojan that hijacks clipboards, blocks bank calls, and takes complete control of Android devices...
Best of Android Fax Apps: Top 5 Secure Picks for 2026
Discover the best of Android fax apps to send and receive secure documents on the go. Compare Municorn Fax App, Fax.Plus, and other top Android tools...
PT-2026-49836
Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar while rendering attacker-controlled content, enabling phishing...
CVE-2026-0133: Undefined Security Weakness
In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Android 17 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.
This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 17. Android 17 devices with a security patch level of 2026-07-01 or later are protected against these issues Android 17, as released on AOSP, will have...
PT-2026-49792
In smmu attach dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-210155
An issue was discovered in Rakuten Send Anywhere File Transfer for Android com.estmob.android.sendanywhere 23.2.9. The vulnerability allows untrusted applications with no permissions to force arbitrary file downloads into the app's scoped storage. The resulting files appear in the application's...