CVE-2026-0093

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0085

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0079

In multiple functions of ubsanthrowingruntime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0093

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0089

In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0091

In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0093

The Android operating system is affected by a vulnerability in the loadSafeLabel() function, where errors in information representation create a misleading UI due to obfuscation. This flaw allows an attacker to achieve a local escalation of privilege without requiring additional execution privile...

CVE-2026-0091

The Android Framework component is vulnerable to a local privilege escalation due to over-privileged shell users in multiple locations. This flaw allows an attacker to execute code within the launcher process without requiring additional execution privileges or user interaction. Impacted versions...

CVE-2026-0087

The Android operating system framework contains a logic error within the approvalLevelForDomainInternal method of the DomainVerificationService.java file. This vulnerability allows an attacker to hijack arbitrary app links , potentially leading to a local escalation of privilege without requiring...

CVE-2026-0085

A security vulnerability exists in the Android operating system within the applySimpleFieldMaxSize method of the DataRowHandler.java class. The flaw stems from insufficient input validation , which allows for the insertion of an excessively large contact name. This can result in a local denial of...

CVE-2026-0078

A security vulnerability exists in the Android Framework component within the DevicePolicyManagerService.java class. Due to improper input validation in the setGlobalProxy function, a possible desync in persistence can occur. This flaw allows a local attacker to achieve escalation of privilege wi...

CVE-2026-0086

In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0086

In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0078

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0093

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0086

In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0080

In multiple functions of ubsanthrowingruntime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0061

In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0069

A resource exhaustion vulnerability exists in the verifySignature method of the ApkChecksums.java class within the Framework component of the Android operating system. An attacker can exploit this flaw to cause a crash, leading to a local denial of service (DoS) without requiring additional execu...