99024 matches found
CVE-2026-79040: Use of Uninitialized Resource
Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79239: Out-of-bounds Read
Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...
PT-2026-81584
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome...
PT-2026-81636
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in the Payments component allows a remote attacker to potentially bypass system access restrictions. This is achieved by leveraging social engineering a...
PT-2026-81649
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An information leak exists in the Sharing component that allows a local attacker to obtain sensitive information via a co-installed app by leveraging social engineering...
PT-2026-81704
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An information leak exists in Intents, which allows a remote attacker to leak sensitive information through a crafted HTML page. Recommendations Update Google Chrome on Andro...
PT-2026-81770
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A use after free issue exists in the Audio component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the...
PT-2026-81840
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Missing authorization in CustomTabs allows a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. A sandbox is a security mechanis...
PT-2026-81832
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An incorrect reference resolution in the WebView component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts...
PT-2026-81634
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description An uninitialized resource in the GPU allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome on Android...
Linux Android Binder Transaction Buffer Overflow DoS
The vulnerability of the bindertransaction function in the drivers/android/binder.c module of the Linux kernel communication driver with the Android kernel involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
CVE-2026-79241: Out-of-bounds Read
Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
SpringPeace
SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...
CVE-2026-59566
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
EUVD-2026-64882
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59566
CVE-2026-59566 is a locally exploitable buffer overflow in Zscaler Client Connector on Android and ChromeOS that can lead to a local denial-of-service. The CVSS 3.1 base score is 8.4 (HIGH) with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low complexity and no privileges or user i...
CVE-2026-59566 Local denial-of-service
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
CVE-2026-59566 Local denial-of-service
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...
ToxicPanda 2.0 can take over your Android phone and banking apps
Researchers have uncovered ToxicPanda 2.0, an Android banking Trojan and remote-access tool designed for account takeover and “on-device fraud.” Not only does ToxicPanda 2.0 have a much larger target list of banks and e-wallets, it has also expanded its capabilities by combining banking overlays,...
