Vulnerabilidades en Google
7001 resultadosCVE-2026-58874HIGHIn multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead EPSS 0.1%CVE-2025-48533HIGHIn multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This coulEPSS 0.1%CVE-2026-28603HIGHIn assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confusedEPSS 0.1%CVE-2025-48562MEDIUMIn writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could lead to local inforEPSS 0.1%CVE-2025-36908MEDIUMIn lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lEPSS 0.1%CVE-2026-102252MEDIUMPath Traversal in VMDK Extractor in OSV-SCALIBREPSS 0.1%CVE-2026-28577HIGHIn addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to localEPSS 0.1%CVE-2024-27221HIGHIn update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priEPSS 0.1%CVE-2026-28657HIGHIn onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. ThEPSS 0.1%CVE-2023-21270HIGHIn restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions that should be revokeEPSS 0.1%CVE-2024-27237MEDIUMIn wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local EPSS 0.1%CVE-2024-27232MEDIUMIn asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing null check. This could lead to local information disclEPSS 0.1%CVE-2026-28616HIGHIn Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalatEPSS 0.1%CVE-2025-26419LOWIn initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to localEPSS 0.1%CVE-2023-21349—In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaEPSS 0.1%CVE-2026-55290LOWIn setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local informatiEPSS 0.1%CVE-2026-28624HIGHIn multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could leEPSS 0.1%CVE-2025-48541HIGHIn onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. EPSS 0.1%CVE-2026-106254MEDIUMInformation leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information viEPSS 0.1%CVE-2026-0019HIGHIn SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation oEPSS 0.1%