CVE Program partner

google_android

Android (associated with Google Inc. or Open Handset Alliance)

API
CVEs, 365 days3185,352 all time, 95 rejected
Quality35%median 99%
CVSS by the CNA5%share of records
CWE0%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA94%lower is better
OrganisationAndroid (associated with Google Inc. or Open Handset Alliance)
RoleCNA
TypeVendor, Open Source, Researcher
Reports toGoogle → mitre
ScopeAndroid issues, as well as vulnerabilities in third-party software discovered by Android that are not in another CNA’s scope.
Advisorieshttps://source.android.com/security/bulletin

Latest CVEs · RSS

  • CVE-2026-28648 2026-10-05
    In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privi
  • CVE-2026-28647 2026-10-05
    In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local esc
  • CVE-2026-28641 2026-10-05
    In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. Th
  • CVE-2026-28640 2026-10-05
    In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This cou
  • CVE-2026-28625 2026-10-05
    In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no addition
  • CVE-2026-58880 2026-10-05
    In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of priv
  • CVE-2026-58865 2026-10-05
    In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of ser
  • CVE-2026-58859 2026-10-05
    In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional exe
  • CVE-2026-58856 2026-10-05
    In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to loc
  • CVE-2026-58854 2026-10-05
    In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional executio
  • CVE-2026-58841 2026-10-05
    In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escal
  • CVE-2026-58835 2026-10-05
    In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no addition
  • CVE-2026-58834 2026-10-05
    In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lea
  • CVE-2026-58815 2026-10-05
    In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additi
  • CVE-2026-55286 2026-10-05
    In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege
  • CVE-2026-55280 2026-10-05
    In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional e
  • CVE-2026-55270 2026-10-05
    In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no
  • CVE-2026-55269 2026-10-05
    In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of pri
  • CVE-2026-55266 2026-10-05
    In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with
  • CVE-2026-55265 2026-10-05
    In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service wit
  • CVE-2026-49937 2026-10-05
    In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of pri
  • CVE-2026-49933 2026-10-05
    In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer derefe
  • CVE-2026-49885 2026-10-05
    In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no
  • CVE-2026-49880 2026-10-05
    In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privile
  • CVE-2026-49878 2026-10-05
    In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote cod

All CVE Program partners