Android
Android Niveau de correctif mars 2026
Advisory officielAndroid Niveau de correctif mars 2026, publié le 2026-03-01, corrige 111 CVE, dont 2 activement exploitées (CISA KEV). Les versions antérieures restent exposées à ces vulnérabilités.
- Date de sortie
- 2026-03-01
- Fin de support
- —
- CVE corrigées
- 111
- KEV CISA
- 2
8 critique · 86 élevé
CVE corrigées
| CVE |
|---|
|
CVE-2025-39682
CRITICAL 9.8
KEV
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process … |
|
CVE-2026-21385
HIGH
KEV
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48645
CRITICAL 9.8
In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of pri… |
|
CVE-2025-39946
CRITICAL 9.8
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket t… |
|
CVE-2026-0034
HIGH 8.4
In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to lo… |
|
CVE-2026-0035
HIGH 8.4
In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. Th… |
|
CVE-2026-0047
HIGH 8.4
In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This co… |
|
CVE-2026-0020
HIGH 8.4
In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass. Th… |
|
CVE-2026-0021
HIGH 8.4
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to loca… |
|
CVE-2026-0025
HIGH 8.4
In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation o… |
|
CVE-2026-0010
HIGH 8.4
In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
|
CVE-2026-0011
HIGH 8.4
In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead t… |
|
CVE-2026-0013
HIGH 8.4
In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local esca… |
|
CVE-2025-48582
HIGH 8.4
In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to loc… |
|
CVE-2025-48602
HIGH 8.4
In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This… |
|
CVE-2026-0031
HIGH 8.4
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0038
HIGH 8.4
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-40266
HIGH 8.2
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent … |
|
CVE-2026-0023
HIGH 7.8
In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This co… |
|
CVE-2025-48646
HIGH 7.8
In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with … |
|
CVE-2025-48654
HIGH 7.8
In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of … |
|
CVE-2026-0032
HIGH 7.8
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47388
HIGH 7.8
Memory corruption while passing pages to DSP with an unaligned starting address. |
|
CVE-2025-47394
HIGH 7.8
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations. |
|
CVE-2025-47396
HIGH 7.8
Memory corruption occurs when a secure application is launched on a device with insufficient memory. |
|
CVE-2025-47346
HIGH 7.8
Memory corruption while processing a secure logging command in the trusted application. |
|
CVE-2025-47348
HIGH 7.8
Memory corruption while processing identity credential operations in the trusted application. |
|
CVE-2025-47339
HIGH 7.8
Memory corruption while deinitializing a HDCP session. |
|
CVE-2025-20795
HIGH 7.8
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
|
CVE-2025-64783
HIGH 7.8
DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context… |
|
CVE-2025-48544
HIGH 7.8
In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege wit… |
|
CVE-2025-38616
HIGH 7.8
In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive… |
|
CVE-2025-38618
HIGH 7.8
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to … |
|
CVE-2026-0017
HIGH 7.7
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalatio… |
|
CVE-2025-48630
HIGH 7.4
In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. This could lead to l… |
|
CVE-2025-58407
HIGH 7.4
Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or w… |
|
CVE-2025-64784
HIGH 7.1
DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of servi… |
|
CVE-2025-64893
HIGH 7.1
DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure or application denial of service. An … |
|
CVE-2025-48641
HIGH 7.0
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional… |
|
CVE-2025-47395
MEDIUM 6.5
Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element. |
|
CVE-2025-20793
MEDIUM 6.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base … |
|
CVE-2025-20794
MEDIUM 6.5
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base… |
|
CVE-2025-20760
MEDIUM 6.5
In Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service, if a UE has connected … |
|
CVE-2025-20761
MEDIUM 6.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base … |
|
CVE-2025-20762
MEDIUM 6.5
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base … |
|
CVE-2025-48631
MEDIUM 6.5
In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to remote denial of… |
|
CVE-2026-0015
MEDIUM 6.2
In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial… |
|
CVE-2026-0012
MEDIUM 6.2
In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local inf… |
|
CVE-2026-0014
MEDIUM 6.2
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local den… |
|
CVE-2025-48585
MEDIUM 6.2
In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local den… |
|
CVE-2025-58408
MEDIUM 5.9
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and… |
|
CVE-2025-48642
MEDIUM 5.5
In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure … |
|
CVE-2025-48644
MEDIUM 5.5
In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no ad… |
|
CVE-2024-43859
MEDIUM 5.5
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-2879
MEDIUM 5.1
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driv… |
|
CVE-2026-0024
MEDIUM 4.0
In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check.… |
|
CVE-2024-43766
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-10865
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-13952
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-32313
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47366
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47378
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47385
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47397
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47398
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-47402
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48567
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48568
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48574
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48577
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48578
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48579
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48587
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48609
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48613
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48619
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48634
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-48635
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-58409
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-58411
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-59600
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-61612
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-61613
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-61614
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-61615
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-61616
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-69278
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2025-69279
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0005
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0006
CRITICAL
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0007
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0026
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0027
CRITICAL
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0028
CRITICAL
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0029
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0030
CRITICAL
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-0037
CRITICAL
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20401
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20402
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20403
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20404
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20405
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20406
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20420
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20421
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20422
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20425
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20426
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20427
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20428
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
|
CVE-2026-20434
HIGH
Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir. |
Déployer cette mise à jour Android sur votre flotte
Appaloosa gère les mises à jour et le catalogue d'apps Android de votre parc.