EUVD-2026-73961

In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28611

In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28611

CVE-2026-28611 is a vulnerability in Android's NfcService.java where a missing permission check in multiple functions enables a silent NFC payment session hijacking , leading to local privilege escalation with no additional execution privileges or user interaction required. The CVSS 3.1 score is ...

EUVD-2026-73959

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28607

CVE-2026-28607 is a local elevation of privilege vulnerability in the Android Framework component, caused by a background activity launch bypass due to a confused deputy in multiple functions across multiple locations. No additional execution privileges or user interaction are required for exploi...

EUVD-2026-73958

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28606

CVE-2026-28606 is a logic error in the handleBondStateChanged method of Android's AdapterService.java , which allows an attacker to skip Bluetooth pairing and achieve remote escalation of privilege without user consent, without additional execution privileges, and without user interaction. The CN...

CVE-2026-28603

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73956

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28603

CVE-2026-28603 is a local escalation of privilege vulnerability in the Android system component AppRestrictionsFragment.java, specifically in the assertSafeToStartCustomActivity method. The root cause is a confused deputy flaw that permits read/write access to private files. Exploitation requires...

CVE-2026-28602

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73955

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28602

CVE-2026-28602 is a logic error in ClipboardService.java (method setClipboardAccessNotificationsEnabledForUser) within the Android Framework component that can break multi-user isolation , leading to local escalation of privilege . No additional execution privileges or user interaction are requir...

EUVD-2026-73954

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28600

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28600

CVE-2026-28600 is a confused deputy vulnerability in the Android payment framework , specifically in the onCreate method of PaymentDefaultDialog.java. An attacker can change the device's default payment app without additional execution privileges or user interaction, enabling a local escalation o...

CVE-2026-28599

In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...