# Google Android. Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58957.md) `CVE-2026-58957` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58956.md) `CVE-2026-58956` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693 - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58955.md) `CVE-2026-58955` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow.](https://agentprime.io/advisories/CVE-2026-58953.md) `CVE-2026-58953` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [In multiple locations, there is a possible permission bypass due to a missing permission check.](https://agentprime.io/advisories/CVE-2026-58951.md) `CVE-2026-58951` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [Stack-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58949.md) `CVE-2026-58949` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58946.md) `CVE-2026-58946` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693 - [In multiple locations, there is a possible side channel information leak due to improperly used crypto.](https://agentprime.io/advisories/CVE-2026-58945.md) `CVE-2026-58945` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58944.md) `CVE-2026-58944` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58943.md) `CVE-2026-58943` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58942.md) `CVE-2026-58942` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation.](https://agentprime.io/advisories/CVE-2026-58938.md) `CVE-2026-58938` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58937.md) `CVE-2026-58937` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58936.md) `CVE-2026-58936` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58934.md) `CVE-2026-58934` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693 - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2026-58933.md) `CVE-2026-58933` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-58886.md) `CVE-2026-58886` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451 - [In multiple locations, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58885.md) `CVE-2026-58885` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58884.md) `CVE-2026-58884` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [In multiple locations, there is a possible denial of service due to a logic error in the code.](https://agentprime.io/advisories/CVE-2026-58883.md) `CVE-2026-58883` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow.](https://agentprime.io/advisories/CVE-2026-58882.md) `CVE-2026-58882` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-58879.md) `CVE-2026-58879` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58877.md) `CVE-2026-58877` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58876.md) `CVE-2026-58876` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58875.md) `CVE-2026-58875` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [Heap-based buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58871.md) `CVE-2026-58871` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.](https://agentprime.io/advisories/CVE-2026-58870.md) `CVE-2026-58870` · CVE record: Google Android · No CVSS score · Not analysed yet · Published 2 Nov 2026 - [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-58868.md) `CVE-2026-58868` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-58867.md) `CVE-2026-58867` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Broken access control - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-58866.md) `CVE-2026-58866` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Broken access control - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58857.md) `CVE-2026-58857` · CVE record: Google Android · CVSS 8.1 High · Not analysed yet · Published 2 Nov 2026 · Tags: Race condition, Memory corruption - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58853.md) `CVE-2026-58853` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58847.md) `CVE-2026-58847` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693 - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58845.md) `CVE-2026-58845` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Out-of-bounds read in Google Android](https://agentprime.io/advisories/CVE-2026-58844.md) `CVE-2026-58844` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58838.md) `CVE-2026-58838` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58837.md) `CVE-2026-58837` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-58836.md) `CVE-2026-58836` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-693 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58829.md) `CVE-2026-58829` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58828.md) `CVE-2026-58828` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58827.md) `CVE-2026-58827` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58826.md) `CVE-2026-58826` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-58825.md) `CVE-2026-58825` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Buffer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58824.md) `CVE-2026-58824` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [SQL injection in Google Android](https://agentprime.io/advisories/CVE-2026-58821.md) `CVE-2026-58821` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: SQL injection - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-58817.md) `CVE-2026-58817` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-58814.md) `CVE-2026-58814` · CVE record: Google Android · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Integer overflow in Google Android](https://agentprime.io/advisories/CVE-2026-55292.md) `CVE-2026-55292` · CVE record: Google Android · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-55289.md) `CVE-2026-55289` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception.](https://agentprime.io/advisories/CVE-2026-55288.md) `CVE-2026-55288` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-248 - [In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insufficient UI.](https://agentprime.io/advisories/CVE-2026-55287.md) `CVE-2026-55287` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451 - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-55283.md) `CVE-2026-55283` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Use after free in Google Android](https://agentprime.io/advisories/CVE-2026-55275.md) `CVE-2026-55275` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-55272.md) `CVE-2026-55272` · CVE record: Google Android · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-55271.md) `CVE-2026-55271` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-55264.md) `CVE-2026-55264` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-441 - [In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI.](https://agentprime.io/advisories/CVE-2026-55263.md) `CVE-2026-55263` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451 - [Improper input validation in Google Android](https://agentprime.io/advisories/CVE-2026-55262.md) `CVE-2026-55262` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-20 - [Missing authorization in Google Android](https://agentprime.io/advisories/CVE-2026-55261.md) `CVE-2026-55261` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Broken access control - [In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI.](https://agentprime.io/advisories/CVE-2026-55257.md) `CVE-2026-55257` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-451 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .