EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73985

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28653

CVE-2026-28653 affects Android and resides in the file rw_t3t.cc , where multiple functions contain a possible out-of-bounds write caused by an integer overflow . The impact is a local escalation of privilege with no additional execution privileges required and no user interaction needed for expl...

CVE-2026-28650

A logic error in the setHiddenWhileSuspended method of WindowState.java in Android allows an overlay bypass , leading to local escalation of privilege with no additional execution privileges and no user interaction required. The vulnerability is rated High severity in Samsung's July 2026 Security...

CVE-2026-28650

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73983

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73982

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28644

CVE-2026-28644 is a permission bypass vulnerability in the startNextMatchingActivity method of ActivityTaskManagerService.java in the Android system. The root cause is a confused deputy flaw, enabling a local escalation of privilege with no additional execution privileges required and no user int...

CVE-2026-28644

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73981

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28642

CVE-2026-28642 is a High -severity vulnerability in the Android System framework, specifically in executeRequest of ActivityStarter.java. A logic error allows a background activity launch , enabling local escalation of privilege with no additional execution privileges and no user interaction requ...

EUVD-2026-73980

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28639

CVE-2026-28639 is a critical out-of-bounds write vulnerability in the Android system, located in the function rw_mfc_handle_read_op within rw_mfc.cc. The root cause is a logic error in the code. Exploitation requires no additional execution privileges and no user interaction , enabling a local es...

EUVD-2026-73978

In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28636

In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28636

CVE-2026-28636 is a confused deputy vulnerability in the setupLayout method of PickActivity.java within Android. It allows a bypass of the "Install unknown apps" security restriction, leading to local escalation of privilege with no additional execution privileges required and no user interaction...

EUVD-2026-73977

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28634

CVE-2026-28634 is a local escalation of privilege vulnerability in PhoneInterfaceManager.java (handleUssdRequest) within the Android framework. A logic error allows a caller to send a USSD request without the required permission, enabling privilege escalation with no additional execution privileg...

CVE-2026-28634

In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...