Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.0
Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
High 8.4
In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a pat…
-
High 8.8
In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from…
-
High 8.4CVE-2026-0047 Public exploit
In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information du…
-
High 8.4
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the c…
-
High 8.4
In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead…
-
High 8.4
In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing fi…
-
High 8.4
In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper…
-
High 7.8
In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This …
-
High 8.4
In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could …
-
High 8.4
In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds c…
-
High 8.4
In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to…
-
High 8.4
In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This c…
-
High 7.8
In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due…
-
High 8.4
In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypas…
-
High 7.8CVE-2026-0023 Public exploit
In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership du…
-
High 8.4
In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a …
-
High 8.4
In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain per…
-
High 7.7
In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the …
-
High 8.4CVE-2026-0013 Public exploit
In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confus…
-
High 8.4
In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a lo…
-
High 8.4CVE-2026-0010 Public exploit
In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This co…
-
High 8.4
In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could l…
-
High 7.8
In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjac…
-
High 7.8
In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.…
-
High 8.4
In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in …
-
High 8.4
In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escala…
-
High 7.8
In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lea…
-
High 7.0
In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local es…
-
High 7.7
In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic e…
-
High 8.4
In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. T…
-
High 7.4
In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel info…
-
High 8.4
In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate fil…
-
High 7.8
In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previo…
-
High 8.4
In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the c…
-
High 8.4
In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypas…
-
High 8.4
In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an…
-
High 8.4
In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a conf…
-
High 7.8
In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission du…
-
High 7.4
In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This…