# Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-0099.md)
  `CVE-2026-0099` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026
- [In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0098.md)
  `CVE-2026-0098` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-441
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0097.md)
  `CVE-2026-0097` · CVE record: Google Android · CVSS 8.0 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-693
- [In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI.](https://agentprime.io/advisories/CVE-2026-0096.md)
  `CVE-2026-0096` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-451
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0095.md)
  `CVE-2026-0095` · CVE record: Google Android · CVSS 8.0 High · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI.](https://agentprime.io/advisories/CVE-2026-0094.md)
  `CVE-2026-0094` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-451
- [In multiple locations, there is a possible misleading UI due to obfuscation.](https://agentprime.io/advisories/CVE-2026-0093.md)
  `CVE-2026-0093` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-451
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0091.md)
  `CVE-2026-0091` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0089.md)
  `CVE-2026-0089` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI.](https://agentprime.io/advisories/CVE-2026-0088.md)
  `CVE-2026-0088` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-451
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0087.md)
  `CVE-2026-0087` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-693
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0086.md)
  `CVE-2026-0086` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0085.md)
  `CVE-2026-0085` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-20
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0080.md)
  `CVE-2026-0080` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0079.md)
  `CVE-2026-0079` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0078.md)
  `CVE-2026-0078` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-20
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0077.md)
  `CVE-2026-0077` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-693
- [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2026-0076.md)
  `CVE-2026-0076` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [SQL injection in Google Android](https://agentprime.io/advisories/CVE-2026-0075.md)
  `CVE-2026-0075` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: SQL injection
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-0074.md)
  `CVE-2026-0074` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Denial of service
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0070.md)
  `CVE-2026-0070` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-20
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-0069.md)
  `CVE-2026-0069` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Denial of service
- [In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-0067.md)
  `CVE-2026-0067` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026
- [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2026-0061.md)
  `CVE-2026-0061` · CVE record: Google Android · CVSS 5.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1021
- [In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause.](https://agentprime.io/advisories/CVE-2026-0060.md)
  `CVE-2026-0060` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026
- [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0059.md)
  `CVE-2026-0059` · CVE record: Google Android · CVSS 8.0 High · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0056.md)
  `CVE-2026-0056` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0055.md)
  `CVE-2026-0055` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Path traversal, Privilege escalation
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0052.md)
  `CVE-2026-0052` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0051.md)
  `CVE-2026-0051` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-20
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0050.md)
  `CVE-2026-0050` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0048.md)
  `CVE-2026-0048` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0046.md)
  `CVE-2026-0046` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0045.md)
  `CVE-2026-0045` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-693
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0044.md)
  `CVE-2026-0044` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0043.md)
  `CVE-2026-0043` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-0042.md)
  `CVE-2026-0042` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Denial of service
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0041.md)
  `CVE-2026-0041` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0040.md)
  `CVE-2026-0040` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0039.md)
  `CVE-2026-0039` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2026-0036.md)
  `CVE-2026-0036` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1021
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0018.md)
  `CVE-2026-0018` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-20
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0016.md)
  `CVE-2026-0016` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0009.md)
  `CVE-2026-0009` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Privilege escalation
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48652.md)
  `CVE-2025-48652` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48649.md)
  `CVE-2025-48649` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-693
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2025-48648.md)
  `CVE-2025-48648` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Denial of service
- [In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-48616.md)
  `CVE-2025-48616` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026
- [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-48595.md)
  `CVE-2025-48595` · CVE record: Google Android · CVSS 8.4 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 1 Jun 2026 · Tags: Memory corruption
- [In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48570.md)
  `CVE-2025-48570` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-441
- [Incorrect authorization in Google Android](https://agentprime.io/advisories/CVE-2025-32348.md)
  `CVE-2025-32348` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2025-26418.md)
  `CVE-2025-26418` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2025-22426.md)
  `CVE-2025-22426` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-22424.md)
  `CVE-2025-22424` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-20
- [In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-0073.md)
  `CVE-2026-0073` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 4 May 2026 · Tags: Authentication bypass
- [Uncontrolled resource consumption in Google Android](https://agentprime.io/advisories/CVE-2026-0049.md)
  `CVE-2026-0049` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Denial of service
- [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-48651.md)
  `CVE-2025-48651` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: CWE-20
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0124.md)
  `CVE-2026-0124` · CVE record: Google Android · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0123.md)
  `CVE-2026-0123` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0122.md)
  `CVE-2026-0122` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/google-android.md>
Older: <https://agentprime.io/advisories/technology/google-android.md?cursor=WyIyMDI2LTAzLTEwVDIwOjQ2OjUxLjM1MDAwMFoiLCJDVkUtMjAyNi0wMTIyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-android&cursor=WyIyMDI2LTA2LTAxVDIxOjE0OjU1LjcxNTAwMFoiLCJDVkUtMjAyNi0wMTAwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-android/?cursor=WyIyMDI2LTA2LTAxVDIxOjE0OjU1LjcxNTAwMFoiLCJDVkUtMjAyNi0wMTAwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.