CVE-2026-28666

In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73991

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

A critical heap-based buffer overflow (CWE-122) exists in the p2p_process_prov_disc_bootstrap_req function of p2p_pd.c within the Android WiFi subcomponent. This memory corruption vulnerability could allow an attacker to achieve remote code execution (RCE) without requiring additional privileges ...

CVE-2026-28660

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28660

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28660

A logic error in the getAllSessions function across multiple files on Android systems creates a confused deputy vulnerability. This flaw can lead to local information disclosure without requiring additional execution privileges or user interaction. The issue is addressed in the September 2026 sec...

EUVD-2026-73990

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28658

A logic error in the findMetaAuthUid function of AccountsDb.java within the Framework component allows for a possible FRP bypass . This vulnerability could lead to a local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue is addressed i...

EUVD-2026-73989

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28657

In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73987

In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-28656

A security vulnerability exists in multiple functions of DeviceAdminAdd.java within the Framework component of Android. This flaw allows for a tapjacking/overlay attack , which can lead to a local escalation of privilege without requiring additional execution privileges. Exploitation of this vuln...

CVE-2026-28655

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73985

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28653

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28653

A vulnerability exists in multiple functions of rw_t3t.cc , where an integer overflow can lead to an out-of-bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Technical details regarding the specific versio...

CVE-2026-28652

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28652

A missing permission check in multiple functions of RangingServiceImpl.java within the Ultra-Wideband (UWB) component of Android (specifically affecting versions 14, 15, and 16) creates a potential Man-in-the-Middle (MITM) vulnerability. This flaw could lead to remote information disclosure witho...

EUVD-2026-73984

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...