Vulnérabilités
Vulnérabilités des apps suivies
29 098 CVE touchent une app ou un OS suivi (toutes sévérités, toutes plateformes). 376 figurent au catalogue CISA KEV, donc leur exploitation est avérée.
- CVE correspondantes
- 29 098
- Activement exploitées
- 376
- Fenêtre de publication
- 1997-01-01 → 2026-11-10
Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.
| CVE |
|---|
|
CVE-2026-58879
HIGH 8.4
In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no addi… |
|
CVE-2026-58877
MEDIUM 4.0
In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local informatio… |
|
CVE-2026-58876
CRITICAL 9.8
In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution p… |
|
CVE-2026-58875
MEDIUM 6.2
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional ex… |
|
CVE-2026-58871
HIGH 8.4
In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of p… |
|
CVE-2026-58870
MEDIUM 4.0
In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local info… |
|
CVE-2026-58868
CRITICAL 9.8
In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with n… |
|
CVE-2026-58867
HIGH 8.4
In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of pri… |
|
CVE-2026-58866
HIGH 8.4
In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check. Th… |
|
CVE-2026-58857
HIGH 8.1
In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execut… |
|
CVE-2026-58853
HIGH 7.5
In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with… |
|
CVE-2026-58847
HIGH 8.4
In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with n… |
|
CVE-2026-58845
HIGH 8.4
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional … |
|
CVE-2026-58844
HIGH 8.4
In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no … |
|
CVE-2026-58838
MEDIUM 4.0
In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. This could lead to local information disclo… |
|
CVE-2026-58837
HIGH 8.4
In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with n… |
|
CVE-2026-58836
HIGH 7.8
In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded ap… |
|
CVE-2026-58829
HIGH 8.4
In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no addi… |
|
CVE-2026-58828
HIGH 8.4
In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additiona… |
|
CVE-2026-58827
HIGH 8.4
In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additi… |
|
CVE-2026-58826
HIGH 8.4
In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional e… |
|
CVE-2026-58825
HIGH 8.4
In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no … |
|
CVE-2026-58824
HIGH 8.4
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege w… |
|
CVE-2026-58821
MEDIUM 6.2
In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. This could lead to local denial… |
|
CVE-2026-58817
MEDIUM 6.2
In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to … |
|
CVE-2026-58814
HIGH 7.5
In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no ad… |
|
CVE-2026-55292
MEDIUM 5.3
In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. This could lead to remote information disclosure with no add… |
|
CVE-2026-55289
HIGH 8.4
In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local escalatio… |
|
CVE-2026-55288
HIGH 8.4
In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of pr… |
|
CVE-2026-55287
HIGH 8.4
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insuff… |
|
CVE-2026-55283
HIGH 8.4
In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional ex… |
|
CVE-2026-55275
HIGH 8.4
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional executi… |
|
CVE-2026-55272
MEDIUM 6.2
In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service w… |
|
CVE-2026-55271
HIGH 8.4
In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This could lead to local … |
|
CVE-2026-55264
MEDIUM 4.0
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local informatio… |
|
CVE-2026-55263
HIGH 8.4
In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. … |
|
CVE-2026-55262
HIGH 8.4
In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input … |
|
CVE-2026-55261
HIGH 8.4
In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local… |
|
CVE-2026-55257
HIGH 8.4
In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privi… |
|
CVE-2026-49935
MEDIUM 4.0
In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local infor… |
|
CVE-2026-49934
HIGH 7.8
In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalati… |
|
CVE-2026-49931
HIGH 8.4
In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could lead to local escalatio… |
|
CVE-2026-49924
MEDIUM 6.2
In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to l… |
|
CVE-2026-49923
HIGH 8.4
In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code. This could lead to local escalat… |
|
CVE-2026-49922
HIGH 8.4
In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This could lead to local esc… |
|
CVE-2026-49912
MEDIUM 4.0
In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error in the code. This coul… |
|
CVE-2026-45514
HIGH 8.4
In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. This could lead to loca… |
|
CVE-2026-28665
HIGH 8.4
In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to … |
|
CVE-2026-28645
MEDIUM 6.8
In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the code. This could lead t… |
|
CVE-2026-28643
MEDIUM 6.2
In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional e… |
Gérez votre parc avec Appaloosa
Appaloosa pousse mises à jour d'OS, apps et politiques sur vos appareils Windows, macOS, iOS et Android depuis une seule console.