# Google Android. Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-0121.md) `CVE-2026-0121` · CVE record: Google Android · CVSS 2.9 Low · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition, Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0120.md) `CVE-2026-0120` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0119.md) `CVE-2026-0119` · CVE record: Google Android · CVSS 6.8 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0118.md) `CVE-2026-0118` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-693 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0117.md) `CVE-2026-0117` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0116.md) `CVE-2026-0116` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure.](https://agentprime.io/advisories/CVE-2026-0115.md) `CVE-2026-0115` · CVE record: Google Android · CVSS 2.1 Low · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-1300 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0114.md) `CVE-2026-0114` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0113.md) `CVE-2026-0113` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-0112.md) `CVE-2026-0112` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition, Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0111.md) `CVE-2026-0111` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0110.md) `CVE-2026-0110` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure.](https://agentprime.io/advisories/CVE-2026-0109.md) `CVE-2026-0109` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-1419 - [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2026-0108.md) `CVE-2026-0108` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: Broken access control - [In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0107.md) `CVE-2026-0107` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-441 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2025-36920.md) `CVE-2025-36920` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption, CWE-20 - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2025-48611.md) `CVE-2025-48611` · CVE record: Google Android · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption - [Path traversal in Google Android](https://agentprime.io/advisories/CVE-2025-48636.md) `CVE-2025-48636` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Path traversal - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2024-31328.md) `CVE-2024-31328` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-693 - [In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check.](https://agentprime.io/advisories/CVE-2026-0047.md) `CVE-2026-0047` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-280 - [In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-0038.md) `CVE-2026-0038` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 - [In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-0037.md) `CVE-2026-0037` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2026-0035.md) `CVE-2026-0035` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0034.md) `CVE-2026-0034` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-20 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0032.md) `CVE-2026-0032` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: Privilege escalation - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0031.md) `CVE-2026-0031` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0030.md) `CVE-2026-0030` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0029.md) `CVE-2026-0029` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Privilege escalation - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0028.md) `CVE-2026-0028` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-0027.md) `CVE-2026-0027` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-0026.md) `CVE-2026-0026` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control - [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2026-0025.md) `CVE-2026-0025` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Information disclosure - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-0024.md) `CVE-2026-0024` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2026-0023.md) `CVE-2026-0023` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: Privilege escalation - [In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0021.md) `CVE-2026-0021` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441 - [Insecure direct object reference in Google Android](https://agentprime.io/advisories/CVE-2026-0020.md) `CVE-2026-0020` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0017.md) `CVE-2026-0017` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control, CWE-693 - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0015.md) `CVE-2026-0015` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-20 - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-0014.md) `CVE-2026-0014` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-20 - [In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0013.md) `CVE-2026-0013` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441 - [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2026-0012.md) `CVE-2026-0012` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control, CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0011.md) `CVE-2026-0011` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-693, CWE-703 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-0010.md) `CVE-2026-0010` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0008.md) `CVE-2026-0008` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441 - [Clickjacking in Google Android](https://agentprime.io/advisories/CVE-2026-0007.md) `CVE-2026-0007` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-1021 - [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-0006.md) `CVE-2026-0006` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Mar 2026 · Tags: Memory corruption - [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2026-0005.md) `CVE-2026-0005` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Information disclosure - [In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-48654.md) `CVE-2025-48654` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-610 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48653.md) `CVE-2025-48653` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-693 - [SQL injection in Google Android](https://agentprime.io/advisories/CVE-2025-48650.md) `CVE-2025-48650` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: SQL injection - [In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48646.md) `CVE-2025-48646` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441 - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2025-48645.md) `CVE-2025-48645` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Mar 2026 · Tags: Privilege escalation - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2025-48644.md) `CVE-2025-48644` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-20 - [Information disclosure in Google Android](https://agentprime.io/advisories/CVE-2025-48642.md) `CVE-2025-48642` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Information disclosure - [Race condition in Google Android](https://agentprime.io/advisories/CVE-2025-48641.md) `CVE-2025-48641` · CVE record: Google Android · CVSS 7.0 High · Not analysed yet · Published 2 Mar 2026 · Tags: Race condition - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48635.md) `CVE-2025-48635` · CVE record: Google Android · CVSS 7.7 High · Not analysed yet · Published 2 Mar 2026 · Tags: Information disclosure, CWE-693 - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2025-48634.md) `CVE-2025-48634` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control - [In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure.](https://agentprime.io/advisories/CVE-2025-48630.md) `CVE-2025-48630` · CVE record: Google Android · CVSS 7.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-208 - [Improper access control in Google Android](https://agentprime.io/advisories/CVE-2025-48619.md) `CVE-2025-48619` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control - [Improper privilege management in Google Android](https://agentprime.io/advisories/CVE-2025-48613.md) `CVE-2025-48613` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: Privilege escalation Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .