Google Android Mobile operating system

Qualcomm Strongbox TEE Buffer Overflow Memory Corruption
CVE-2026-25277 8.8 - High - June 01, 2026

Memory corruption while using Strongbox due to buffer overflow.

Classic Buffer Overflow

CVE-2026-25276: Memory Corruption in Qualcomm Strongbox (Bound Check Missing)
CVE-2026-25276 8.8 - High - June 01, 2026

Memory corruption while using Strongbox due to missing bounds check.

out-of-bounds array index

CVE-2026-24089: Memory Corruption in Fastboot Commands
CVE-2026-24089 7.2 - High - June 01, 2026

Memory corruption while processing fastboot commands with invalid input.

Improper Validation of Syntactic Correctness of Input

Qualcomm Snapdragon Memory Corruption via Uninitialized Variable in Display CLI
CVE-2026-24085 7.2 - High - June 01, 2026

Memory Corruption when processing display command line information due to improper initialization of a variable.

Stack Overflow

Qualcomm QSEE Memory Corruption via Heap Overflow in Secure Data Init
CVE-2025-59606 7.8 - High - June 01, 2026

Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

NULL Pointer Dereference

Qualcomm driver memory corruption via overlength device ID
CVE-2025-59605 7.8 - High - June 01, 2026

Memory Corruption when processing device identifier strings that exceed the expected maximum length.

Memory Corruption

Qualcomm Memory Corruption via Null Ptr on memcpy
CVE-2025-59604 7.8 - High - June 01, 2026

Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

NULL Pointer Dereference

Android AppOpsService Local Info Disclosure via Permission Bypass
CVE-2026-28586 3.3 - Low - June 01, 2026

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android Telephony Local Exec via CallIntentProcessor Flaw
CVE-2026-28581 4 - Medium - June 01, 2026

In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileges needed. User interaction is null for exploitation.

Android Local Priv Escalation via Persistence Bounds Check Desync
CVE-2026-28580 7.8 - High - June 01, 2026

In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Classic Buffer Overflow

Android DevicePolicyManagerService desync causes local DoS
CVE-2026-28578 5.5 - Medium - June 01, 2026

In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Input Validation

Android WindowManagerService Class Local Privilege Escalation via Tapjacking
CVE-2026-28577 7.8 - High - June 01, 2026

In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Clickjacking

Android Local PrivEsc via LoadedArsc.cpp Heap Buffer Overflow
CVE-2026-0100 7.8 - High - June 01, 2026

In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Heap-based Buffer Overflow

Android HostEM Null Binding: Background Activity Launch (Priv Escalation)
CVE-2026-0099 7.8 - High - June 01, 2026

In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Android Local Privilege Escalation via getCallingPackageName Confused Deputy
CVE-2026-0098 7.8 - High - June 01, 2026

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Confused Deputy

Android SUI: Local PrivEsc via Misleading Forget Device Dialog
CVE-2026-0096 7.8 - High - June 01, 2026

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

User Interface (UI) Misrepresentation of Critical Information

Android BLE Pairing Logic Error Allows Priv Escalation
CVE-2026-0097 8 - High - June 01, 2026

In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic error. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Protection Mechanism Failure

Local Priv Escal on Android DisableSupervisionActivity Null Check Flaw
CVE-2026-0086 6.8 - Medium - June 01, 2026

In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Local Priv Escal on Android via DomainVerificationService Logic Error
CVE-2026-0087 7.8 - High - June 01, 2026

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Protection Mechanism Failure

Android CertInstaller UI Bypass Enables Local Priv Escalation
CVE-2026-0088 7.8 - High - June 01, 2026

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

User Interface (UI) Misrepresentation of Critical Information

PackageInstallerService Missing Perm Check -> Local PrivEsc on Android
CVE-2026-0089 7.8 - High - June 01, 2026

In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android Launcher LPE via Over-Privileged Shell User
CVE-2026-0091 7.8 - High - June 01, 2026

In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android UI Obfuscation LPE via Misleading UI
CVE-2026-0093 7.8 - High - June 01, 2026

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

User Interface (UI) Misrepresentation of Critical Information

Android KeyChain UI leads to local privilege escalation
CVE-2026-0094 7.8 - High - June 01, 2026

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

User Interface (UI) Misrepresentation of Critical Information

Android BT L2CAP integer overflow: local privilege escalation
CVE-2026-0095 8 - High - June 01, 2026

In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privileged Bluetooth process due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound

Android ActivityRecord Logic Error Enabling BAL for Local Priv Esc
CVE-2026-0077 5.9 - Medium - June 01, 2026

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Protection Mechanism Failure

Android ubsan_throwing_runtime.cpp Integer Overflow DoS
CVE-2026-0079 5.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound

Android UBSan Integer Overflow Remote DoS
CVE-2026-0080 6.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound

Local DoS via Oversized Contact Name in Android Contacts Provider
CVE-2026-0085 5.5 - Medium - June 01, 2026

In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Input Validation

Android DPM GlobalProxy Desync Priv Escalation
CVE-2026-0078 7.8 - High - June 01, 2026

In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Input Validation

Android OOB Read in ResourceTypes.cpp Enables Local Priv Escalation
CVE-2026-0076 7.8 - High - June 01, 2026

In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Out-of-bounds Read

Android OS Contact DB SQLi for local privilege escalation
CVE-2026-0075 5.9 - Medium - June 01, 2026

In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

SQL Injection

Android LauncherProcessImageListener Resource Exhaustion DoS
CVE-2026-0074 5.5 - Medium - June 01, 2026

In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Resource Exhaustion

Android DevicePolicyManagerService Denial of Service via Package Hiding
CVE-2026-0070 5.5 - Medium - June 01, 2026

In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Input Validation

Android UBSan Remote DoS via Improper Input Validation
CVE-2026-0051 6.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Input Validation

Android OS crash via ApkChecksums.java verification
CVE-2026-0069 5.5 - Medium - June 01, 2026

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Resource Exhaustion

AFD: Android ubsan Runtime Denial via Logic Error
CVE-2026-0067 5.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Android WindowState.java Tapjacking Escape Leading to Local Priv Escalation
CVE-2026-0061 5.9 - Medium - June 01, 2026

In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Clickjacking

Android AngleAsSystemDriverController Persistent Local DOS via updateState
CVE-2026-0060 5.5 - Medium - June 01, 2026

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Android Bluetooth SDP Heap Overflow Enables Remote Code Exec
CVE-2026-0059 8 - High - June 01, 2026

In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Heap-based Buffer Overflow

Local Info Disclosure via OOB Read in Android ResourceTypes setTo
CVE-2026-0056 3.3 - Low - June 01, 2026

In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Classic Buffer Overflow

Android PackageInstallerService Path Traversal Enables Local Privilege Escalation
CVE-2026-0055 6.2 - Medium - June 01, 2026

In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android Runtime UBSan Integer Overflow Crash (Denial of Service)
CVE-2026-0052 6.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound

Android AdapterService.java Permission Bypass Enables Local Info Disclosure
CVE-2026-0050 3.3 - Low - June 01, 2026

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android UBSAN Crash via Integer Overflow DoS
CVE-2026-0040 6.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound

Android WindowState.java tapjacking local privilege escalation
CVE-2026-0048 6.8 - Medium - June 01, 2026

In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android InputInterceptor Tapjacking / Elevation (CVE-2026-0046)
CVE-2026-0046 6.2 - Medium - June 01, 2026

In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Improper Privilege Management

Android BTA_JV Bonding Bypass Enabling Local Escalation
CVE-2026-0045 7.8 - High - June 01, 2026

In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Protection Mechanism Failure

Android OS: UBSAN Integer Overflow DoS in ubsan_throwing_runtime.cpp
CVE-2026-0043 5.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound

Android Runtime UBSAN Integer Overflow Remote DoS Vulnerability
CVE-2026-0039 6.5 - Medium - June 01, 2026

In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Integer Overflow or Wraparound