Vulnerabilities
Tracked app vulnerabilities
27,728 CVEs affect a tracked app or OS (all severities, all platforms). 377 of them are in the CISA KEV catalog, meaning exploitation is confirmed.
- Matching CVEs
- 27,728
- Actively exploited
- 377
- Publication window
- 2004-07-27 → 2026-11-11
Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.
| CVE |
|---|
|
CVE-2026-10882
HIGH 8.8
Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium securi… |
|
CVE-2026-10881
CRITICAL 9.6
Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted H… |
|
CVE-2026-10702
MEDIUM 4.3
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3. |
|
CVE-2026-10701
HIGH 7.5
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3. |
|
CVE-2026-25277
HIGH 8.8
Memory corruption while using Strongbox due to buffer overflow. |
|
CVE-2026-25276
HIGH 8.8
Memory corruption while using Strongbox due to missing bounds check. |
|
CVE-2026-24089
HIGH 7.2
Memory corruption while processing fastboot commands with invalid input. |
|
CVE-2026-24085
HIGH 7.2
Memory Corruption when processing display command line information due to improper initialization of a variable. |
|
CVE-2025-59606
HIGH 7.8
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. |
|
CVE-2025-59605
HIGH 7.8
Memory Corruption when processing device identifier strings that exceed the expected maximum length. |
|
CVE-2025-59604
HIGH 7.8
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. |
|
CVE-2026-28586
LOW 3.3
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information dis… |
|
CVE-2026-28581
MEDIUM 4.0
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lea… |
|
CVE-2026-28580
HIGH 7.8
In multiple functions of NotificationChannel.java, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalat… |
|
CVE-2026-28578
MEDIUM 5.5
In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to loca… |
|
CVE-2026-28577
HIGH 7.8
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of priv… |
|
CVE-2026-0100
HIGH 7.8
In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addi… |
|
CVE-2026-0099
HIGH 7.8
In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could l… |
|
CVE-2026-0098
HIGH 7.8
In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escal… |
|
CVE-2026-0097
HIGH 8.0
In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/a… |
|
CVE-2026-0096
HIGH 7.8
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could… |
|
CVE-2026-0095
HIGH 8.0
In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer ove… |
|
CVE-2026-0094
HIGH 7.8
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insuffici… |
|
CVE-2026-0093
HIGH 7.8
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution priv… |
|
CVE-2026-0091
HIGH 7.8
In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalatio… |
|
CVE-2026-0089
HIGH 7.8
In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to… |
|
CVE-2026-0088
HIGH 7.8
In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lea… |
|
CVE-2026-0087
HIGH 7.8
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. … |
|
CVE-2026-0086
MEDIUM 6.8
In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalati… |
|
CVE-2026-0085
MEDIUM 5.5
In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to … |
|
CVE-2026-0080
MEDIUM 6.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of s… |
|
CVE-2026-0079
MEDIUM 5.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local deni… |
|
CVE-2026-0078
HIGH 7.8
In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local esca… |
|
CVE-2026-0077
HIGH 7.8
In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could lea… |
|
CVE-2026-0076
HIGH 7.8
In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege… |
|
CVE-2026-0075
HIGH 7.8
In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no… |
|
CVE-2026-0074
MEDIUM 5.5
In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local denial of s… |
|
CVE-2026-0070
MEDIUM 5.5
In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This coul… |
|
CVE-2026-0069
MEDIUM 5.5
In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with n… |
|
CVE-2026-0067
MEDIUM 5.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This coul… |
|
CVE-2026-0061
MEDIUM 5.9
In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could l… |
|
CVE-2026-0060
MEDIUM 5.5
In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could lea… |
|
CVE-2026-0059
HIGH 8.0
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal… |
|
CVE-2026-0056
LOW 3.3
In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no… |
|
CVE-2026-0055
MEDIUM 6.2
In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a pat… |
|
CVE-2026-0052
MEDIUM 6.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of s… |
|
CVE-2026-0051
MEDIUM 6.5
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This could lead to remot… |
|
CVE-2026-0050
LOW 3.3
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local in… |
|
CVE-2026-0048
MEDIUM 6.8
In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead to local … |
|
CVE-2026-0046
MEDIUM 6.2
In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead … |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.