CVE-2026-28606

A logic error in AdapterService.java within the handleBondStateChanged function allows an attacker to skip pairing. This vulnerability could lead to a remote escalation of privilege without user consent and requires no additional execution privileges or user interaction. Remediation is available ...

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28602

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73955

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28602

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28602

A logic error in the setClipboardAccessNotificationsEnabledForUser function within ClipboardService.java leads to a multi-user isolation vulnerability in the Android Framework . This flaw could allow for a local escalation of privilege (EoP) without requiring additional execution privileges or us...

CVE-2026-28599

A logic error in the addCreatorToken method of ActivityManagerService.java within the Android Framework component enables an Intent Redirection Bypass . This vulnerability allows for a local escalation of privilege without requiring additional execution privileges or user interaction. The issue i...

CVE-2026-28599

In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28599

In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73953

In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73951

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

CVE-2026-28594 identifies a use after free vulnerability in the Android Framework caused by a logic error. This flaw could allow a local attacker to achieve local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The vulnerability impacts Android...

CVE-2026-28594

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73949

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

This vulnerability affects the core Android operating system and the Media Framework . It is caused by a logic error leading to improper encryption key validation in multiple locations. Successful exploitation can result in local escalation of privilege without requiring additional execution priv...

CVE-2026-28584

A logic error in the createSessionInternal function of PackageInstallerService.java allows for a permanent Denial of Service (DoS) on the device. This vulnerability requires no additional execution privileges or user interaction for exploitation. Affected devices can be mitigated by applying the ...

CVE-2026-28584

In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...