PT-2026-57448

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

PT-2026-57477

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57478

A heads up that there are a ton of CVEs being patched for July 2026 June was also high. So many that they released the "hot fix" patches in June and still have not updated the Android Patch notes. Could just be 4th of July holiday, but they are an international firm. No previous delays as long...

PT-2026-57467

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A confused deputy issue allows unauthorized read and write access to files in multiple locations. This flaw enables local escalation of privilege without...

PT-2026-57460

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-57479

Name of the Vulnerable Software and Affected Versions Android OS affected versions not specified Description A logic error in the setHiddenWhileSuspended function within WindowState.java allows for an overlay bypass. This flaw enables local escalation of privilege without requiring additional...

PT-2026-57471

Name of the Vulnerable Software and Affected Versions VoiceInteractionManagerService affected versions not specified Description A resource exhaustion issue exists in the initForUserNoTracing function within VoiceInteractionManagerService.java. This flaw allows for a persistent local denial of...

PT-2026-57465

In dec frm prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...