CVE-2026-69373

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69368

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69371

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...

CVE-2026-69350

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69316

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-28656

In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

EUVD-2026-73987

In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-28656

This vulnerability affects DeviceAdminAdd.java in Android Wear (disclosed in the 2026-09-01 security bulletin). Multiple functions are susceptible to a tapjacking/overlay attack , allowing a local escalation of privilege with only low privileges and user interaction required. The CVSS 3.1 score i...

CVE-2026-28650

CVE-2026-28650 is a local elevation of privilege vulnerability in Android's WindowState.java (setHiddenWhileSuspended function), caused by a logic error enabling an overlay bypass . No additional execution privileges or user interaction are required. It scores CVSS 7.8 (High) with impacts to conf...

CVE-2026-28650

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73983

In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28631

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73975

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28631

CVE-2026-28631 is a consent bypass vulnerability in Android's IntentForwarderActivity.java (specifically the buildMiniResolver method), exploitable via a tapjacking/overlay attack . The flaw allows local escalation of privilege without additional execution privileges and without user interaction....

CVE-2026-28630

CVE-2026-28630 affects the onCreate method of ContactsPickerActivity.kt in the Android framework, where a tapjacking/overlay attack can produce a misleading user interface, enabling local information disclosure with low privileges and no user interaction. The CVSS 3.1 score is 3.3 (Low) . CISA's ...

CVE-2026-28630

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73974

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28572

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73945

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28572

CVE-2026-28572 is an elevation of privilege vulnerability in the Android Framework component, specifically in the onCreate method of InstallLaunch.kt. A tapjacking/overlay attack can produce a misleading UI, enabling a local attacker to escalate privileges with no additional execution privileges ...