CVE-2026-16404

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in Firefox for Android...

CVE-2026-16397

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the WebExtensions component in Firefox for Android...

CVE-2026-16373

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Privacy component in Firefox for Android...

A week in security (July 20 – July 26)

Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...

Privilege Escalation of Poly Devices on the Android Platform

A local attacker who can execute code on the device could potentially escalate privileges through the Android Runtime vulnerability. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that mitigate the potential...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 PoC for Galaxy S24 Ultra SM-S928U1 Device-sp...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Aristotle ADB Enable A minimal Android app that turns on AD...

Linux Distros Unpatched Vulnerability : CVE-2026-16373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 153. CVE-2026-16373 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-16397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153. CVE-2026-16397 Note that Nessus relies on...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Chromecast within Google Chrome on Android and Linux, as well as in ChromeOS versions prior to 148.0.7778.179, allowed a local attacker to execute arbitrary code within a sandbox through malicious network traffic. Chromium security severity: Medium...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Exploit Configuration for realme RMX3888 D...

Exploit for Use After Free in Linux Linux_Kernel

Aristotle ADB Enable A minimal Android app that turns on AD...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local pri...

Johnson Controls XAAP Android

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

SUSE CVE-2026-16419

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-16424

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-13037

A flaw was found in the WebView component of Google Chrome on Android. This vulnerability, known as a use-after-free, occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A local attacker could exploit this by tricking a user into opening...

EUVD-2026-47577

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-47574

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2017-6264

An elevation of privilege vulnerability exists in the NVIDIA GPU driver gm20bclkthrotsetcdevstate, where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute...