UBUNTU-CVE-2026-6756

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

CVE-2026-6756 Mitigation bypass in Firefox for Android

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

CVE-2026-6756

The Firefox for Android browser is affected by a mitigation bypass vulnerability. This issue has been addressed in Firefox version 150 . For users on Fedora distributions (42, 43, and 44), it is recommended to update to Firefox 150.0 and NSS to 3.122.1 to remediate this and related vulnerabilitie...

CVE-2026-6756

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

CVE-2026-6756

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

CVE-2026-6756 Mitigation bypass in Firefox for Android

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

CVE-2026-6756

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

Android 17 ends all-or-nothing access to your contacts

Some of the apps on your phone want your contacts. Most don't need them all, but have been happily slurping up the lot for years. Google has decided to do something about that with the next version of Android. Android 17 currently in preview is introducing a new Contact Picker that lets users gra...

CVE-2026-39866

Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in releaseupdate.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 patches the issue...

UBUNTU-CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

CVE-2026-39973

Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in brut/androlib/res/decoder/ResFileDecoder.java allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding apktool d. This is a...

EUVD-2026-24039

Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in releaseupdate.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 patches the issue...

Lawnchair security vulnerabilities

Lawnchair is an open-source Android desktop launcher developed by Lawnchair, featuring highly customizable features and Pixel functionality. Lawnchair has a security vulnerability, which stems from command injection in the releaseupdate.yml workflow scheduling input, potentially allowing arbitrar...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Versions of Mozilla Firefox for Android prior to version 150 contain security vulnerabilities, which stem from bypassing security measures...

KLA90991 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote...

CVE-2026-6756: Exposure of Sensitive Information to an Unauthorized Actor

Mitigation bypass in Firefox for Android. This vulnerability was fixed in Firefox 150...

PT-2026-33942

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 150 Description A mitigation bypass exists in the software. Recommendations Update to version 150...

Do Privacy Policies Match with the Logs? an Empirical Study of Privacy Disclosure in Android Application Logs

Privacy policies are intended to inform users about how software systems collect and handle data, yet they often remain vague or incomplete. This paper presents an empirical study of patterns in log-related statements within privacy policies and their alignment with privacy disclosures observed i...

mt6893-security-research

MT6893 Security Research Five security research findings from...

SUSE CVE-2026-6315

Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...