Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0099 CVE record

CVSS 7.8 High

In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code.
- Google Android
Not analysed yet 1 Jun 2026
CVE-2026-0098 CVE record

CVSS 7.8 High

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 1 Jun 2026
CVE-2026-0097 CVE record

CVSS 8.0 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 1 Jun 2026
CVE-2026-0096 CVE record

CVSS 7.8 High

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0095 CVE record

CVSS 8.0 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0094 CVE record

CVSS 7.8 High

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0093 CVE record

CVSS 7.8 High

In multiple locations, there is a possible misleading UI due to obfuscation.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0091 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0089 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0088 CVE record

CVSS 7.8 High

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0087 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 1 Jun 2026
CVE-2026-0086 CVE record

CVSS 6.8 Medium

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0085 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 1 Jun 2026
CVE-2026-0080 CVE record

CVSS 6.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0079 CVE record

CVSS 5.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0078 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 1 Jun 2026
CVE-2026-0077 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 1 Jun 2026
CVE-2026-0076 CVE record

CVSS 7.8 High

Out-of-bounds read in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0075 CVE record

CVSS 7.8 High

SQL injection in Google Android
- Google Android
- SQL injection
Not analysed yet 1 Jun 2026
CVE-2026-0074 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 1 Jun 2026
CVE-2026-0070 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 1 Jun 2026
CVE-2026-0069 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 1 Jun 2026
CVE-2026-0067 CVE record

CVSS 5.5 Medium

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code.
- Google Android
Not analysed yet 1 Jun 2026
CVE-2026-0061 CVE record

CVSS 5.9 Medium

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 1 Jun 2026
CVE-2026-0060 CVE record

CVSS 5.5 Medium

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause.
- Google Android
Not analysed yet 1 Jun 2026
CVE-2026-0059 CVE record

CVSS 8.0 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0056 CVE record

CVSS 3.3 Low

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0055 CVE record

CVSS 6.2 Medium

Improper privilege management in Google Android
- Google Android
- Path traversal
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0052 CVE record

CVSS 6.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0051 CVE record

CVSS 6.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 1 Jun 2026
CVE-2026-0050 CVE record

CVSS 3.3 Low

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0048 CVE record

CVSS 6.8 Medium

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0046 CVE record

CVSS 6.2 Medium

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0045 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 1 Jun 2026
CVE-2026-0044 CVE record

CVSS 6.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0043 CVE record

CVSS 5.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0042 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 1 Jun 2026
CVE-2026-0041 CVE record

CVSS 6.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0040 CVE record

CVSS 6.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0039 CVE record

CVSS 6.5 Medium

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2026-0036 CVE record

CVSS 7.8 High

Clickjacking in Google Android
- Google Android
- CWE-1021
Not analysed yet 1 Jun 2026
CVE-2026-0018 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 1 Jun 2026
CVE-2026-0016 CVE record

CVSS 3.3 Low

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2026-0009 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 1 Jun 2026
CVE-2025-48652 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 1 Jun 2026
CVE-2025-48649 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 1 Jun 2026
CVE-2025-48648 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 1 Jun 2026
CVE-2025-48616 CVE record

CVSS 3.3 Low

In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code.
- Google Android
Not analysed yet 1 Jun 2026
CVE-2025-48595 CVE record

CVSS 8.4 HighCritical · KEVKEV

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 1 Jun 2026
CVE-2025-48570 CVE record

CVSS 7.8 High

In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 1 Jun 2026
CVE-2025-32348 CVE record

CVSS 7.8 High

Incorrect authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 1 Jun 2026
CVE-2025-26418 CVE record

CVSS 7.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 1 Jun 2026
CVE-2025-22426 CVE record

CVSS 7.8 High

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 1 Jun 2026
CVE-2025-22424 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 1 Jun 2026
CVE-2026-0073 CVE record

CVSS 8.8 High

In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code.
- Google Android
- Authentication bypass
Not analysed yet 4 May 2026
CVE-2026-0049 CVE record

CVSS 6.2 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 6 Apr 2026
CVE-2025-48651 CVE record

CVSS 4.0 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 6 Apr 2026
CVE-2026-0124 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0123 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026
CVE-2026-0122 CVE record

CVSS 8.4 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 10 Mar 2026