UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Android Framework performPreInstallChecks() Privilege Escalation

The vulnerability of the performPreInstallChecks function in the InstallRepository.kt scenario of the Android operating system’s framework component is related to a data protection mechanism breach. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Android loadSafeLabel() Privilege Escalation

The vulnerability of the loadSafeLabel function in Android operating systems is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Android handleBondStateChanged Disclosure

The vulnerability of the handleBondStateChanged method in the AdapterService.java class of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by security measures...

Android GraphicsDriverEnableAngleAsSystemDriverController updateState DoS

The vulnerability of the updateState method in the GraphicsDriverEnableAngleAsSystemDriverController.java class in Android operating systems is related to incorrect handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to the lack of a standardized mechanism for handling errors. Exploiting this vulnerability can allow attackers to cause service failures...

ComputerEngine.java Privilege Escalation

The vulnerability in the ComputerEngine.java class of the Android operating system’s Framework component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PipTaskOrganizer Java Privilege Escalation

The vulnerability of the PipTaskOrganizer.java class in the Android operating system framework relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-11085: External Control of Assumed-Immutable Web Parameter

Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

PT-2026-46702

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Incorrect security UI in Messages allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an attacker mimics a legitimate us...

PT-2026-46558

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in the Drag and Drop feature allows a remote attacker who has compromised the renderer process to potentially perform a sandbox...

PT-2026-46513

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in the Accessibility component allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an...

CVE-2026-10892: Out-of-bounds Write

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11010: Use After Free

Use after free in WebShare in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11019: Authentication Bypass by Spoofing

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11127: Improperly Implemented Security Check for Standard

Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted WebAPK. Chromium security severity: Medium...

CVE-2026-11108: Improper Privilege Management

Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11029: Improper Input Validation

Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10929: Heap-based Buffer Overflow

Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10932: Use After Free

Use after free in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...