Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-58957 | high | 8.4 | No | In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. Th... | 2026-11-03 |
| CVE-2026-58946 | high | 8.4 | No | In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to... | 2026-11-03 |
| CVE-2026-58944 | high | 8.4 | No | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused... | 2026-11-03 |
| CVE-2026-58943 | high | 8.4 | No | In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalat... | 2026-11-03 |
| CVE-2026-58942 | high | 8.4 | No | In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of... | 2026-11-03 |
| CVE-2026-58934 | high | 8.4 | No | In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This co... | 2026-11-03 |
| CVE-2026-58885 | high | 8.4 | No | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with... | 2026-11-03 |
| CVE-2026-58884 | high | 8.4 | No | In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to l... | 2026-11-03 |
| CVE-2026-58866 | high | 8.4 | No | In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing p... | 2026-11-03 |
| CVE-2026-58837 | high | 8.4 | No | In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation... | 2026-11-03 |
| CVE-2026-58836 | high | 7.8 | No | In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that all... | 2026-11-03 |
| CVE-2026-58829 | high | 8.4 | No | In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of pri... | 2026-11-03 |
| CVE-2026-58828 | high | 8.4 | No | In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privileg... | 2026-11-03 |
| CVE-2026-58827 | high | 8.4 | No | In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privi... | 2026-11-03 |
| CVE-2026-58826 | high | 8.4 | No | In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege w... | 2026-11-03 |
| CVE-2026-58825 | high | 8.4 | No | In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of... | 2026-11-03 |
| CVE-2026-55289 | high | 8.4 | No | In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead... | 2026-11-03 |
| CVE-2026-55287 | high | 8.4 | No | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to m... | 2026-11-03 |
| CVE-2026-55283 | high | 8.4 | No | In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege wi... | 2026-11-03 |
| CVE-2026-55275 | high | 8.4 | No | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no... | 2026-11-03 |