Tagged “cve.org”
CVEs tagged cve.org, newest first.
46491 CVEsRSS
CVE-2026-58867High· 8.4In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check
In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
CVE-2026-55263High· 8.4In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI
In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution …
CVE-2026-55261High· 8.4In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check
In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User …
CVE-2026-49934High· 7.8In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation
In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti…
CVE-2026-28665High· 8.4In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation
In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. …
CVE-2026-0053High· 8.4In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users
In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execu…
CVE-2025-22436High· 8.4In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack
In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User in…
CVE-2026-20557High· 7.5In Modem, there is a possible out of bounds write due to a missing bounds check
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution pr…
CVE-2026-20556High· 7.5In Modem, there is a possible out of bounds write due to a missing bounds check
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution pr…
CVE-2026-20549High· 7.5In Modem, there is a possible out of bounds write due to improper input validation
In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution…
CVE-2026-20547High· 7.5In Modem, there is a possible out of bounds write due to a missing bounds check
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution pr…
CVE-2026-20548High· 7.5In Modem, there is a possible out of bounds write due to an integer overflow
In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privi…
CVE-2026-20545High· 7.5In Modem, there is a possible out of bounds write due to a missing bounds check
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution pr…
CVE-2026-20499High· 7.5In Modem, there is a possible out of bounds write due to a missing bounds check
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution pr…
CVE-2026-91909Medium· 4.6Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with adjacent network access could potentially e…
CVE-2026-58853High· 7.5In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check
In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for…
CVE-2026-59003Medium· 4.0In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check
In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. …
CVE-2026-59006Medium· 4.0In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack
In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is ne…
CVE-2026-58937Medium· 6.2In multiple locations, there is a possible persistent denial of service due to improper input validation
In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for explo…
CVE-2026-49935Medium· 4.0In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal
In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. This could lead to local information disclosure with no additional execution privileges needed. User interac…
CVE-2026-55264Medium· 4.0In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction …
CVE-2026-58877Medium· 4.0In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy
In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction …
CVE-2026-59015Medium· 4.0In multiple locations, there is a possible permission bypass due to a confused deputy
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58988Medium· 4.0In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check
In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exp…
CVE-2026-58915Medium· 6.1A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for a secure passenger user (User N) without authenticati…
A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for a secure passenger user (User N) without authenticati…
CVE-2026-58817Medium· 6.2In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation
In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User i…
CVE-2026-55272Medium· 6.2In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation
In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed …
CVE-2026-59021Medium· 6.2In multiple locations, there is a possible denial of service due to improper input validation
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58875Medium· 6.2In multiple locations, there is a possible denial of service due to improper input validation
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-59007Medium· 5.3In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code
In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is no…