EUVD-2026-73960

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

CVE-2026-28609 is an out-of-bounds write vulnerability in MatroskaExtractor.cpp , caused by improper casting during a read operation. It can lead to remote code execution with low privileges required and no user interaction needed, rated CVSS 8.8 (HIGH) . The vulnerability is tracked in the Andro...

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73959

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28604

CVE-2026-28604 is a use-after-free vulnerability caused by a race condition in the adbd (Android Debug Bridge Daemon) component of Android. It affects Android 13, 14, 15, and 16 and can lead to remote code execution with low privileges required and no user interaction. The CVSS 3.1 score is 7.5 (...

CVE-2026-28602

CVE-2026-28602 is a vulnerability in the Android Framework component, specifically in the setClipboardAccessNotificationsEnabledForUser method of ClipboardService.java . A logic error in multi-user isolation can lead to local information disclosure (classified as ID in the Android Security Bullet...

CVE-2026-28600

CVE-2026-28600 is a confused deputy vulnerability in the onCreate method of PaymentDefaultDialog.java within the Android platform. A local attacker with low privileges can change the default payment app without user interaction, leading to local escalation of privilege with full impact on confide...

CVE-2026-28599

CVE-2026-28599 is an Intent Redirection Bypass in the addCreatorToken function of ActivityManagerService.java within the Android Framework component, caused by a logic error. It enables local escalation of privilege with low privileges required and no user interaction . The CVSS 3.1 score is 7.8 ...

EUVD-2026-73951

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28594

CVE-2026-28594 is a use-after-free vulnerability in the Android Framework component, caused by a logic error in multiple code locations. It allows local escalation of privilege requiring only low execution privileges and no user interaction, with high impact on confidentiality, integrity, and ava...

EUVD-2026-73949

In multiple locations, there is a possible improper encryption key validation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28590

CVE-2026-28590 is a critical vulnerability in the Android operating system and Media Framework , caused by improper encryption key validation due to a logic error in multiple locations. It enables local escalation of privilege with no additional execution privileges required and no user interacti...

CVE-2026-28584

CVE-2026-28584 is a local denial-of-service vulnerability in the Android Framework component, specifically in the createSessionInternal method of PackageInstallerService.java. A logic error in this code can permanently DoS the device with only low privileges required and no user interaction neede...

EUVD-2026-73947

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28583

In validatecamerametadatastructure of camerametadata.c, there is a possible out of bounds write due to a logical error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73946

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

EUVD-2026-74048

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0084

CVE-2026-0084 is a local privilege escalation vulnerability in the HostEmulationManager.java component of Android, caused by a logic error that permits an unauthorized background activity launch. A low-privileged local attacker can exploit it without user interaction to gain high impact on confid...