CVE-2026-57012

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57008

CVE-2026-57008 affects the Modem component in Android (Pixel devices, per the September 2026 security bulletin). The root cause is improper input validation , leading to remote information disclosure with no additional execution privileges required and no user interaction needed for exploitation....

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-57008

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78991

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56997

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56997

In Av1DecodeFrameTag of vp9hwdheaders.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56989

This vulnerability in Android (tracked as PUB-A-508704693 ) is an out-of-bounds write caused by a missing bounds check in multiple locations. An attacker with System execution privileges can exploit it to achieve local escalation of privilege , and no user interaction is required. The issue is do...

CVE-2026-56989

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78987

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56986

This Android vulnerability (tracked as PUB-A-505504314 ) involves an out-of-bounds read due to type confusion in multiple files, enabling local escalation of privilege without requiring additional execution privileges or user interaction. It is addressed in the September 2026 Pixel security bulle...

CVE-2026-56986

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78984

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56985

CVE-2026-56985 is a type confusion vulnerability in the KeyMint component of Google Pixel devices, allowing an attacker to obtain signatures and achieve local elevation of privilege without additional execution privileges or user interaction. The vulnerability is rated Critical severity in the Pi...

CVE-2026-56985

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56979

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78982

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56979

CVE-2026-56979 affects Android (Pixel), as indicated by the reference to the 2026-09-01 Pixel security bulletin . The vulnerability is a permission bypass caused by a logic error in multiple locations, enabling local privilege escalation with System-level execution privileges required. No user in...

CVE-2026-56975

CVE-2026-56975 is an improper input validation flaw in the Cellular Modem component of a Google Pixel device, as disclosed in the Pixel Security Bulletin 2026-09-01 . The vulnerability enables a remote (proximal/adjacent) denial of service with no additional execution privileges required and no u...

CVE-2026-56974

In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...