Vulnerabilities in google
7,003 resultsCVE-2025-26458HIGHIn multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code. ThisEPSS 0.1%CVE-2023-21248—In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction dEPSS 0.1%CVE-2023-21326—In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channelEPSS 0.1%CVE-2025-48546HIGHIn checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This couldEPSS 0.1%CVE-2023-21247—In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restrictEPSS 0.1%CVE-2025-48610MEDIUMIn __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code. This coulEPSS 0.1%CVE-2024-49728MEDIUMIn generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lEPSS 0.1%CVE-2024-29746HIGHIn lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation oEPSS 0.1%CVE-2026-0198MEDIUMIn is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local informationEPSS 0.1%CVE-2026-28602HIGHIn setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in EPSS 0.1%CVE-2025-26423MEDIUMIn validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. EPSS 0.1%CVE-2023-21314—In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with SysEPSS 0.1%CVE-2023-21312—In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with EPSS 0.1%CVE-2023-21352—In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiEPSS 0.1%CVE-2023-21302—In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaEPSS 0.1%CVE-2025-32333HIGHIn startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code. This could lEPSS 0.1%CVE-2025-0082MEDIUMIn multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confuseEPSS 0.1%CVE-2023-21368—In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additiEPSS 0.1%CVE-2025-48594HIGHIn onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation EPSS 0.1%CVE-2025-48606HIGHIn preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism toEPSS 0.1%