Vendor
Android
57 known vulnerabilities.
Android at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 1 | 1 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 1 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Latest advisories
-
High max 9.8NCSC-2026-0467 206 CVEs
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in hun producten.
-
High max 8.8
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Google heeft kwetsbaarheden verholpen in Android.
-
High max 9.8
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Google heeft meerdere kwetsbaarheden verholpen in Android en Samsung Mobile, waaronder twee zero-day kwetsbaarheden die actief werden uitgebuit in gerichte aanvallen.
57 results · Feed
-
Critical 10.0CVE-2026-28576 Public exploit
In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to …
-
Medium 6.9
Race condition in AndroidTV TvSettings
There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between th…
-
High 7.1CVE-2024-7014 Public exploit
Improper multimedia file attachment validation in Telegram for Android app
EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older.
-
Unscored —
In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. …
-
Unscored —
In nfa_rw_store_ndef_rx_buf of nfa_rw_act.cc, there is a possible out-of-bound write due to a missing bounds check. Thi…
-
Unscored —
In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to …
-
Unscored —
In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were …
-
Unscored —
In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This c…
-
Unscored —
In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to lo…
-
Unscored —
In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race c…
-
Unscored —
In parseMPEGCCData of NuPlayerCCDecoder.cpp, there is a possible out of bounds write due to missing bounds checks. This…
-
Unscored —
In huff_dec_1D of nlc_dec.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead t…
-
Unscored —
In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to …
-
Unscored —
In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass …
-
Unscored —
In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing…
-
Unscored —
In l2cu_send_peer_config_rej of l2c_utils.cc, there is a possible out-of-bound read due to an incorrect bounds check. T…
-
Unscored —
In the configuration of NFC modules on certain devices, there is a possible failure to distinguish individual devices d…
-
Unscored —
In SetScanResponseData of ble_advertiser_hci_interface.cc, there is a possible out-of-bound write due to a missing boun…
-
Unscored —
In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to r…
-
Unscored —
In rw_i93_process_ext_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This …
-
Unscored —
In rw_i93_sm_detect_ndef of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This could …
-
Unscored —
In rw_i93_process_sys_info of rw_i93.cc, there is a possible out-of-bound read due to a missing bounds check. This coul…
-
Unscored —
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible out-of-bound write due to a missing bounds check. This could…
-
Unscored —
In rw_i93_sm_read_ndef of rw_i93.cc, there is a possible out-of-bounds write due to an integer overflow. This could lea…
-
Unscored —
In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privile…
-
Unscored —
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out-of-bound write due to a missing bounds check.…
-
Unscored —
In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code …
-
Unscored —
In numerous hand-crafted functions in libmpeg2, NEON registers are not preserved. This could lead to remote code execut…
-
Unscored —
In floor0_inverse1 of floor0.c, there is a possible out of bounds write due to an incorrect bounds check. This could le…
-
Unscored —
In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission c…
-
Unscored —
In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an inse…
-
Unscored —
In event_handler of keymaster_app.c, there is possible resource exhaustion due to a table being lost on reboot. This co…
-
Unscored —
In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due …
-
Unscored —
In onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could le…
-
Unscored —
In random_get_bytes of random.c, there is a possible degradation of randomness due to an insecure default value. This c…
-
Unscored —
In sample6 of SkSwizzler.cpp, there is a possible out of bounds write due to improper input validation. This could lead…
-
Unscored —
In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could l…
-
Unscored —
In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —CVE-2019-1999 Public exploit
In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead t…