Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
95,805 matching · page 18/1917Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-59012(opens NVD record) | Unscored | — | In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59011(opens NVD record) | Unscored | — | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59010(opens NVD record) | Medium | 6.2 | In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59008(opens NVD record) | Medium | 6.2 | In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59007(opens NVD record) | Medium | 5.3 | In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59006(opens NVD record) | Medium | 4.0 | In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59005(opens NVD record) | High | 8.4 | In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59004(opens NVD record) | High | 8.4 | In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59003(opens NVD record) | Medium | 4.0 | In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59002(opens NVD record) | Unscored | — | In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59001(opens NVD record) | Unscored | — | In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-59000(opens NVD record) | High | 8.4 | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58997(opens NVD record) | Unscored | — | In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58995(opens NVD record) | High | 8.4 | In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58994(opens NVD record) | High | 8.4 | In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58990(opens NVD record) | Unscored | — | In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58989(opens NVD record) | High | 8.4 | In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58988(opens NVD record) | Medium | 4.0 | In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58986(opens NVD record) | High | 8.4 | In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58985(opens NVD record) | Medium | 6.2 | In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58984(opens NVD record) | High | 8.4 | In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58979(opens NVD record) | High | 8.4 | In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58978(opens NVD record) | Medium | 6.8 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58976(opens NVD record) | Unscored | — | In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58975(opens NVD record) | High | 8.4 | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58974(opens NVD record) | High | 8.4 | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58971(opens NVD record) | Unscored | — | In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58970(opens NVD record) | High | 8.4 | In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58969(opens NVD record) | Unscored | — | In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58968(opens NVD record) | High | 8.4 | In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58966(opens NVD record) | High | 8.4 | In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58965(opens NVD record) | High | 8.4 | In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58964(opens NVD record) | High | 8.4 | In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58963(opens NVD record) | Unscored | — | In multiple locations, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58962(opens NVD record) | High | 8.4 | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58961(opens NVD record) | Unscored | — | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58957(opens NVD record) | High | 8.4 | In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58956(opens NVD record) | High | 8.4 | In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58955(opens NVD record) | Medium | 6.2 | In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58953(opens NVD record) | Unscored | — | In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58951(opens NVD record) | Unscored | — | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58949(opens NVD record) | Unscored | — | In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58946(opens NVD record) | High | 8.4 | In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58945(opens NVD record) | Unscored | — | In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58944(opens NVD record) | High | 8.4 | In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58943(opens NVD record) | High | 8.4 | In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58942(opens NVD record) | High | 8.4 | In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58938(opens NVD record) | Unscored | — | In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58937(opens NVD record) | Medium | 6.2 | In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |
| CVE-2026-58936(opens NVD record) | Unscored | — | In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | Nov 2, 2026 |