EUVD-2026-73951

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

CVE-2026-28594 identifies a use after free vulnerability in the Android Framework caused by a logic error. This flaw could allow a local attacker to achieve local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The vulnerability impacts Android...

CVE-2026-28593

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28593

A vulnerability exists in the getItemList method of SettingsFragment.java , where misleading or insufficient UI allows for a possible user interaction bypass . This flaw can lead to a local escalation of privilege without requiring additional execution privileges or user interaction for exploitat...

EUVD-2026-73950

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28593

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73949

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

This vulnerability affects the core Android operating system and the Media Framework . It is caused by a logic error leading to improper encryption key validation in multiple locations. Successful exploitation can result in local escalation of privilege without requiring additional execution priv...

CVE-2026-28584

A logic error in the createSessionInternal function of PackageInstallerService.java allows for a permanent Denial of Service (DoS) on the device. This vulnerability requires no additional execution privileges or user interaction for exploitation. Affected devices can be mitigated by applying the ...

EUVD-2026-73947

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28583

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28583

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73946

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

EUVD-2026-74048

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0084

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0084

A logic error in multiple functions of HostEmulationManager.java allows for a possible background activity launch . This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges or user interaction. Security updates for this flaw are included i...

CVE-2026-0084

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0065

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

CVE-2026-0054

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...