Vulnerabilities

Tracked app vulnerabilities

6,086 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2026-0046 MEDIUM 6.2 Local 2026-06-01 In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead …	MEDIUM 6.2	Local	—	—	2026-06-01	In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead …
CVE-2026-0045 HIGH 7.8 Local 2026-06-01 In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to l…	HIGH 7.8	Local	—	—	2026-06-01	In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to l…
CVE-2026-0044 MEDIUM 6.5 Network 2026-06-01 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This could lead to remote…	MEDIUM 6.5	Network	—	—	2026-06-01	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow. This could lead to remote…
CVE-2026-0043 MEDIUM 5.5 Local 2026-06-01 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local esca…	MEDIUM 5.5	Local	—	—	2026-06-01	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local esca…
CVE-2026-0042 MEDIUM 5.5 Local 2026-06-01 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to local deni…	MEDIUM 5.5	Local	—	—	2026-06-01	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion. This could lead to local deni…
CVE-2026-0041 MEDIUM 6.5 Network 2026-06-01 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial of service …	MEDIUM 6.5	Network	—	—	2026-06-01	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial of service …
CVE-2026-0040 MEDIUM 6.5 Network 2026-06-01 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of s…	MEDIUM 6.5	Network	—	—	2026-06-01	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of s…
CVE-2026-0039 MEDIUM 6.5 Network 2026-06-01 In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote den…	MEDIUM 6.5	Network	—	—	2026-06-01	In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote den…
CVE-2026-0036 HIGH 7.8 Local 2026-06-01 In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of pri…	HIGH 7.8	Local	—	—	2026-06-01	In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of pri…
CVE-2026-0018 MEDIUM 5.5 Local 2026-06-01 In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead t…	MEDIUM 5.5	Local	—	—	2026-06-01	In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead t…
CVE-2026-0016 LOW 3.3 Local 2026-06-01 In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. T…	LOW 3.3	Local	—	—	2026-06-01	In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. T…
CVE-2026-0009 HIGH 7.8 Local 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional exe…	HIGH 7.8	Local	—	—	2026-06-01	In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional exe…
CVE-2025-48652 HIGH 7.8 Local 2026-06-01 In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local esc…	HIGH 7.8	Local	—	—	2026-06-01	In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local esc…
CVE-2025-48649 HIGH 7.8 Local 2026-06-01 In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation o…	HIGH 7.8	Local	—	—	2026-06-01	In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation o…
CVE-2025-48648 MEDIUM 5.5 Local 2026-06-01 In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with…	MEDIUM 5.5	Local	—	—	2026-06-01	In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with…
CVE-2025-48616 LOW 3.3 Local 2026-06-01 In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This…	LOW 3.3	Local	—	—	2026-06-01	In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This…
CVE-2025-48595 HIGH 8.4 KEV Local 2026-06-01 In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…	HIGH 8.4	Local	KEV	—	2026-06-01	In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…
CVE-2025-48570 HIGH 7.8 Local 2026-06-01 In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to …	HIGH 7.8	Local	—	—	2026-06-01	In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to …
CVE-2025-32348 HIGH 7.8 Local 2026-06-01 In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with …	HIGH 7.8	Local	—	—	2026-06-01	In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with …
CVE-2025-26418 HIGH 7.8 Local 2026-06-01 In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device d…	HIGH 7.8	Local	—	—	2026-06-01	In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device d…
CVE-2025-22426 HIGH 7.8 Local 2026-06-01 In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escala…	HIGH 7.8	Local	—	—	2026-06-01	In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escala…
CVE-2025-22424 HIGH 7.8 Local 2026-06-01 In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege…	HIGH 7.8	Local	—	—	2026-06-01	In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege…
CVE-2026-20455 HIGH 7.8 Local 2026-06-01 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has …	HIGH 7.8	Local	—	—	2026-06-01	In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has …
CVE-2026-20454 MEDIUM 6.4 Local 2026-06-01 In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has alread…	MEDIUM 6.4	Local	—	—	2026-06-01	In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has alread…
CVE-2026-20453 MEDIUM 6.7 Local 2026-06-01 In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has …	MEDIUM 6.7	Local	—	—	2026-06-01	In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has …
CVE-2026-28574 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-22163 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21736 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21547 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21546 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21545 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21544 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21543 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21542 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21541 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21540 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21539 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21538 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21381 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21380 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21378 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21376 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21375 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21374 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21373 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21372 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21367 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21353 CRITICAL 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-21352 CRITICAL 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2026-20450 HIGH 2026-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	—	—	2026-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.