Vulnerabilities
Tracked app vulnerabilities
11,280 CVEs affect a tracked app or OS (High, all platforms). 229 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 11,280
- Actively exploited
- 229
- Publication window
- 2010-07-30 → 2026-08-19
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-0009
HIGH 7.8
In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional exe… |
|
CVE-2025-48652
HIGH 7.8
In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local esc… |
|
CVE-2025-48649
HIGH 7.8
In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation o… |
|
CVE-2025-48595
HIGH 8.4
KEV
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a… |
|
CVE-2025-48570
HIGH 7.8
In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. This could lead to … |
|
CVE-2025-32348
HIGH 7.8
In multiple locations, there is a possible background activity launch due to a missing permission check. This could lead to local escalation of privilege with … |
|
CVE-2025-26418
HIGH 7.8
In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device d… |
|
CVE-2025-22426
HIGH 7.8
In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escala… |
|
CVE-2025-22424
HIGH 7.8
In multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escalation of privilege… |
|
CVE-2026-20455
HIGH 7.8
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has … |
|
CVE-2026-28574
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-22163
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21736
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21547
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21546
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21545
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21544
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21543
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21542
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21541
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21540
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21539
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21538
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21381
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21380
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21378
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21376
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21375
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21374
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21373
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21372
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-21367
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-20450
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-20449
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-20448
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-20447
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-20435
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-20433
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-47403
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-47401
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-47400
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2025-47384
HIGH
Indexed via Android Security Bulletin; full NVD metadata pending. |
|
CVE-2026-8975
HIGH 8.8
1 app
Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume th… |
|
CVE-2026-8974
HIGH 8.8
1 app
Memory safety bugs present in Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effor… |
|
CVE-2026-8973
HIGH 8.8
1 app
Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
|
CVE-2026-8972
HIGH 8.8
1 app
Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
|
CVE-2026-8970
HIGH 8.8
1 app
Privilege escalation in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. |
|
CVE-2026-8969
HIGH 8.1
1 app
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |
|
CVE-2026-8968
HIGH 7.5
1 app
Denial-of-service due to invalid pointer in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird… |
|
CVE-2026-8967
HIGH 7.5
1 app
Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. |