CVE-2026-28613

CVE-2026-28613 is a local escalation of privilege vulnerability in Android, located in the initAppLinkTypeAndIntent function of ChannelImpl.java . The root cause is improper input validation , which allows the launch of an arbitrary intent . No additional execution privileges are required, but us...

CVE-2026-44964

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...