Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.8In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack.Jun 1, 2026
- Medium6.2In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.Jun 1, 2026
- High7.8In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow.Jun 1, 2026
- Medium5.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Jun 1, 2026
- Medium5.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.Jun 1, 2026
- Medium6.5In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.Jun 1, 2026
- High7.8In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.Jun 1, 2026
- Medium5.5In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation.Jun 1, 2026
- Low3.3In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass.Jun 1, 2026
- High7.8In multiple locations, there is a possible tapjacking due to a logic error in the code.Jun 1, 2026
- High7.8In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code.Jun 1, 2026
- High7.8In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass.Jun 1, 2026
- Medium5.5In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion.Jun 1, 2026
- Low3.3In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code.Jun 1, 2026
- High7.8In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.Jun 1, 2026
- High7.8In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a…Jun 1, 2026
- High7.8In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code.Jun 1, 2026
- High7.8In multiple locations, there is a possible way to reveal images across users due to improper input validation.Jun 1, 2026
- Low2.1A vulnerability was found in j3k0 mcp-google-workspace up to 831790e7d5c2663325733d9f5579cc339a267c4c.Jun 1, 2026
- Critical10.0In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check.Jun 1, 2026
- High8.4Android Framework Integer Overflow VulnerabilityKEVEPSS 1.7%Jun 1, 2026
- High7.8In multiple locations, there is a possible background activity launch due to a missing permission check.EPSS 0.1%Jun 1, 2026