CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-58884In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58883In multiple locations, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-58882In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow.Google Android
- CVE-2026-58879In descramble of multiple files, there is a possible out-of-bounds write due to improper casting.Google Android
- CVE-2026-58877In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58876In multiple locations, there is a possible memory safety issue due to a use-after-free.Google Android
- CVE-2026-58875In multiple locations, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-58871In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow.Google Android
- CVE-2026-58870In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58868In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58867In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58866In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing…Google Android
- CVE-2026-58857In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58853In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check.Google Android
- CVE-2026-58847In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code.Google Android
- CVE-2026-58845In multiple locations, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-58844In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check.Google Android
- CVE-2026-58838In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation.Google Android
- CVE-2026-58837In multiple locations, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2026-58836In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that…Google Android
- CVE-2026-58829In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2026-58828In multiple functions of base.c, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58827In multiple functions of dma-buf.c, there is a possible use after free due to a race condition.Google Android
- CVE-2026-58826In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2026-58825In multiple functions of fork.c, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2026-58824In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-58821In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection.Google Android
- CVE-2026-58817In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation.Google Android
- CVE-2026-58814In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow.Google Android
- CVE-2026-55292In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow.Google Android