Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Jun 1, 2026
- High7.8In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Jun 1, 2026
- Medium5.5In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation.Jun 1, 2026
- Low3.3In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass.Jun 1, 2026
- High7.8In multiple locations, there is a possible tapjacking due to a logic error in the code.Jun 1, 2026
- High7.8In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code.Jun 1, 2026
- High7.8In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass.Jun 1, 2026
- Medium5.5In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion.Jun 1, 2026
- Low3.3In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code.Jun 1, 2026
- High7.8In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.Jun 1, 2026
- High7.8In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a…Jun 1, 2026
- High7.8In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code.Jun 1, 2026
- High7.8In multiple locations, there is a possible way to reveal images across users due to improper input validation.Jun 1, 2026
- Critical10.0In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check.Jun 1, 2026
- Medium4.6Nextcloud is an open source content collaboration platform.Jun 1, 2026
- High8.4Android Framework Integer Overflow VulnerabilityKEVEPSS 1.7%Jun 1, 2026
- High7.8In multiple locations, there is a possible background activity launch due to a missing permission check.EPSS 0.1%Jun 1, 2026
- High8.3Home Assistant is open source home automation software that puts local control and privacy first.May 29, 2026
- High7.8Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via…May 28, 2026
- High8.3Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer p…May 28, 2026
- Medium4.3Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026
- Medium4.3Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026