Advisories · Technology

Google Android.

Every CVE that names Google Android among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-49935 CVE record

CVSS 4.0 Medium

Path traversal in Google Android
- Google Android
- Path traversal
Not analysed yet 2 Nov 2026
CVE-2026-49934 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-49931 CVE record

CVSS 8.4 High

In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-49924 CVE record

CVSS 6.2 Medium

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 2 Nov 2026
CVE-2026-49923 CVE record

CVSS 8.4 High

In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-49922 CVE record

CVSS 8.4 High

In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 2 Nov 2026
CVE-2026-49912 CVE record

CVSS 4.0 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-45514 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-28665 CVE record

CVSS 8.4 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-28645 CVE record

CVSS 6.8 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-28643 CVE record

CVSS 6.2 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-28632 CVE record

CVSS 4.0 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-28621 CVE record

In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check.
- Google Android
Not analysed yet 2 Nov 2026
CVE-2026-28597 CVE record

CVSS 8.4 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 2 Nov 2026
CVE-2026-28588 CVE record

CVSS 8.4 High

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2026-0053 CVE record

CVSS 8.4 High

Improper access control in Google Android
- Google Android
- Broken access control
Not analysed yet 2 Nov 2026
CVE-2025-26433 CVE record

CVSS 8.4 High

In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2025-22436 CVE record

CVSS 8.4 High

In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-56952 CVE record

CVSS 6.7 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-56936 CVE record

CVSS 6.8 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-56906 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 6 Oct 2026
CVE-2026-55330 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-55307 CVE record

CVSS 4.4 Medium

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-0198 CVE record

CVSS 4.4 Medium

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-28648 CVE record

CVSS 7.8 High

In Settings, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 5 Oct 2026
CVE-2026-28647 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 5 Oct 2026
CVE-2026-28641 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 5 Oct 2026
CVE-2026-28640 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 5 Oct 2026
CVE-2026-28625 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 5 Oct 2026
CVE-2026-58880 CVE record

CVSS 7.0 High

Race condition in Google Android
- Google Android
- Race condition
Not analysed yet 5 Oct 2026
CVE-2026-58865 CVE record

CVSS 7.5 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-58859 CVE record

CVSS 7.8 High

In multiple places, there is a possible denial of service due to an uncaught exception.
- Google Android
- CWE-248
Not analysed yet 5 Oct 2026
CVE-2026-58856 CVE record

CVSS 3.3 Low

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-58854 CVE record

CVSS 7.8 High

Type confusion in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-58841 CVE record

CVSS 7.8 High

Improper privilege management in Google Android
- Google Android
- Privilege escalation
Not analysed yet 5 Oct 2026
CVE-2026-58835 CVE record

CVSS 8.8 High

Heap-based buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-58834 CVE record

CVSS 5.5 Medium

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 5 Oct 2026
CVE-2026-58815 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-55286 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-55280 CVE record

CVSS 8.8 High

Use of uninitialized variable in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-55270 CVE record

CVSS 7.8 High

In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 5 Oct 2026
CVE-2026-55269 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 5 Oct 2026
CVE-2026-55266 CVE record

CVSS 7.8 High

Uncontrolled resource consumption in Google Android
- Google Android
- Denial of service
Not analysed yet 5 Oct 2026
CVE-2026-55265 CVE record

CVSS 6.5 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-49937 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-49933 CVE record

CVSS 7.8 High

Uninitialized pointer access in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-49885 CVE record

CVSS 7.8 High

Integer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-49880 CVE record

CVSS 7.8 High

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-49878 CVE record

CVSS 7.2 High

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-45524 CVE record

CVSS 8.8 High

Missing authorization in Google Android
- Google Android
- Broken access control
Not analysed yet 5 Oct 2026
CVE-2026-28667 CVE record

CVSS 5.5 Medium

Buffer overflow in Google Android
- Google Android
- Memory corruption
Not analysed yet 5 Oct 2026
CVE-2026-58773 CVE record

CVSS 6.7 Medium

Out-of-bounds write in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-58767 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-58766 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-58765 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-58755 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-58751 CVE record

CVSS 6.7 Medium

Use after free in Google Android
- Google Android
- Memory corruption
Not analysed yet 15 Sept 2026
CVE-2026-58747 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-58744 CVE record

CVSS 7.8 High

Improper input validation in Google Android
- Google Android
- CWE-20
Not analysed yet 15 Sept 2026
CVE-2026-58739 CVE record

CVSS 6.7 Medium

In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy.
- Google Android
- CWE-441
Not analysed yet 15 Sept 2026