Platform
Android
6,319 known vulnerabilities.
1,170 results · Clear filters · Feed
-
High 7.8
In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due t…
-
High 7.8
In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay …
-
High 7.8
In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to l…
-
High 7.8
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges …
-
High 7.8
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due …
-
High 7.8
In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code. Thi…
-
High 7.8
In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to…
-
High 7.8CVE-2025-48583 Public exploit
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the…
-
High 7.8
In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in …
-
High 7.8
In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypas…
-
High 7.8
In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in…
-
High 7.8CVE-2025-48572 Exploited
In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. Th…
KEV Dec 2, 2025 -
High 7.8
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 7.8
In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the co…
-
High 7.0
In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escal…
-
High 7.8
In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a co…
-
High 7.8
In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to m…
-
High 7.8
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications w…
-
High 7.8
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devi…
-
High 7.8
In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devi…
-
High 7.8
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This …
-
High 8.0CVE-2025-48593 Public exploit
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. T…
-
High 8.1
Zoom Workplace for Android - Improper Authorization Handling
Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
-
High 7.5
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection
The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nh_ynaa_comments() function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supp…
-
High 7.8
In System UI, there is a possible way to view other users' images due to a confused deputy. This could lead to local es…
-
High 8.8
In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of…
-
High 7.8
In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabli…
-
High 7.8
In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to …
-
High 7.8
In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility s…
-
High 7.8
In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permis…
-
High 8.4
In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in th…
-
High 7.8
In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default v…
-
High 7.8
In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app…
-
High 7.3
In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper…
-
High 7.8
In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic e…
-
High 7.8
In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to …
-
High 7.8
In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. …