60338 matches found
ASB-A-463995203
In pngimagefinishread of pngrtran.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-467082881
In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch bal due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-473812391
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0016: Improper Privilege Management
In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2026-28581: NULL Pointer Dereference
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation with User execution privileges needed. User interaction is needed for exploitation...
CVE-2026-0086: Improper Privilege Management
In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-45569
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the Framework component of the Android operating system leads to incorrect code generation and potential tapjacking. Tapjacking is a technique where an attacker overlays a...
PT-2026-45598
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description In the getApplicationLabel function of KeyChainActivity.java, misleading or insufficient user interface elements may allow a user to be tricked into approving...
PT-2026-45596
Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description An issue exists in the Android Framework component due to improper access control and an over-privileged shell user. This allows for the execution of code within the launcher proces...
CVE-2025-22424: Improper Input Validation
In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
PT-2026-45567
Name of the Vulnerable Software and Affected Versions Android versions 14 through 16 QPR2 Description An integer overflow exists in multiple locations within the Android Framework, which is the core layer of APIs and system services that applications interact with. This issue allows for local...
PT-2026-45254
Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description A heap buffer overflow in the wlan AP driver can lead to memory corruption. This issue allows for remote code execution with User execution privileges, requiring no user interaction fo...
VulnCheck KEV: CVE-2025-48595
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation...
ASB-A-290364858
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-462431486
In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-481967442
Bulletin has no description...
ASB-A-471173239
Bulletin has no description...
ASB-A-350456241
Bulletin has no description...