CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-58974In multiple locations, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58971In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow.Google Android
- CVE-2026-58970In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-58969In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58968In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free.Google Android
- CVE-2026-58966In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow.Google Android
- CVE-2026-58965In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-119740Nexbox A95X Amlogic S905X UART Unauthenticated Console AccessNexbox A95X
- CVE-2026-58964In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation.Google Android
- CVE-2026-58963In multiple locations, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-58962In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58961In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the…Google Android
- CVE-2026-58957In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-58956In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code.Google Android
- CVE-2026-58955In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code.Google Android
- CVE-2026-58953In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow.Google Android
- CVE-2026-58951In multiple locations, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2026-58949In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow.Google Android
- CVE-2026-58946In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58945In multiple locations, there is a possible side channel information leak due to improperly used crypto.Google Android
- CVE-2026-58944In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a…Google Android
- CVE-2026-58943In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-58942In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2026-58938In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation.Google Android
- CVE-2026-58937In multiple locations, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2026-58936In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free.Google Android
- CVE-2026-58934In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58933In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code.Google Android
- CVE-2026-58886In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code.Google Android
- CVE-2026-58885In multiple locations, there is a possible permission bypass due to a confused deputy.Google Android