Vulnerability-Lookup

CERTFR-2026-AVI-1158

Vulnerability from certfr_avis - Published: 2026-09-10 - Updated: 2026-09-10

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions 14, 15, 16, 16-qpr2, 17 sans le correctif du 05 septembre 2026

References

Title

Publication Time

Tags

Bulletin de sécurité Google Android

2026-09-07

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions 14, 15, 16, 16-qpr2, 17 sans le correctif du 05 septembre 2026",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-21552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21552"
    },
    {
      "name": "CVE-2026-45198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45198"
    },
    {
      "name": "CVE-2026-24090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24090"
    },
    {
      "name": "CVE-2026-28664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28664"
    },
    {
      "name": "CVE-2026-49918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49918"
    },
    {
      "name": "CVE-2026-45529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45529"
    },
    {
      "name": "CVE-2026-0001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0001"
    },
    {
      "name": "CVE-2026-28627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28627"
    },
    {
      "name": "CVE-2026-28618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28618"
    },
    {
      "name": "CVE-2026-20502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20502"
    },
    {
      "name": "CVE-2026-20460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20460"
    },
    {
      "name": "CVE-2026-34192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34192"
    },
    {
      "name": "CVE-2026-20473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20473"
    },
    {
      "name": "CVE-2026-28582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28582"
    },
    {
      "name": "CVE-2026-49895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49895"
    },
    {
      "name": "CVE-2025-48566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48566"
    },
    {
      "name": "CVE-2026-24080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24080"
    },
    {
      "name": "CVE-2026-28603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28603"
    },
    {
      "name": "CVE-2026-58846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58846"
    },
    {
      "name": "CVE-2026-28584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28584"
    },
    {
      "name": "CVE-2026-28600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28600"
    },
    {
      "name": "CVE-2026-45519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45519"
    },
    {
      "name": "CVE-2026-52993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-52993"
    },
    {
      "name": "CVE-2026-58820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58820"
    },
    {
      "name": "CVE-2026-49932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49932"
    },
    {
      "name": "CVE-2026-41158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41158"
    },
    {
      "name": "CVE-2026-49926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49926"
    },
    {
      "name": "CVE-2026-28657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28657"
    },
    {
      "name": "CVE-2026-28606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28606"
    },
    {
      "name": "CVE-2026-28638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28638"
    },
    {
      "name": "CVE-2026-28642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28642"
    },
    {
      "name": "CVE-2026-28634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28634"
    },
    {
      "name": "CVE-2026-28581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28581"
    },
    {
      "name": "CVE-2026-34196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34196"
    },
    {
      "name": "CVE-2026-25259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25259"
    },
    {
      "name": "CVE-2026-34193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34193"
    },
    {
      "name": "CVE-2026-28658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28658"
    },
    {
      "name": "CVE-2026-28620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28620"
    },
    {
      "name": "CVE-2026-28613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28613"
    },
    {
      "name": "CVE-2026-28622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28622"
    },
    {
      "name": "CVE-2025-48565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48565"
    },
    {
      "name": "CVE-2026-55294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55294"
    },
    {
      "name": "CVE-2026-28614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28614"
    },
    {
      "name": "CVE-2026-28590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28590"
    },
    {
      "name": "CVE-2026-28663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28663"
    },
    {
      "name": "CVE-2026-20469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20469"
    },
    {
      "name": "CVE-2025-48651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48651"
    },
    {
      "name": "CVE-2026-22164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22164"
    },
    {
      "name": "CVE-2026-20504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20504"
    },
    {
      "name": "CVE-2026-20497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20497"
    },
    {
      "name": "CVE-2026-24079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24079"
    },
    {
      "name": "CVE-2026-24092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24092"
    },
    {
      "name": "CVE-2026-0054",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0054"
    },
    {
      "name": "CVE-2026-20458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20458"
    },
    {
      "name": "CVE-2026-25289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25289"
    },
    {
      "name": "CVE-2026-22166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22166"
    },
    {
      "name": "CVE-2026-28666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28666"
    },
    {
      "name": "CVE-2026-21733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21733"
    },
    {
      "name": "CVE-2026-28668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28668"
    },
    {
      "name": "CVE-2026-24091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24091"
    },
    {
      "name": "CVE-2026-28607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28607"
    },
    {
      "name": "CVE-2026-20477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20477"
    },
    {
      "name": "CVE-2026-28602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28602"
    },
    {
      "name": "CVE-2026-21734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21734"
    },
    {
      "name": "CVE-2026-45197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45197"
    },
    {
      "name": "CVE-2026-28596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28596"
    },
    {
      "name": "CVE-2026-20503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20503"
    },
    {
      "name": "CVE-2026-27280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-27280"
    },
    {
      "name": "CVE-2026-45517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45517"
    },
    {
      "name": "CVE-2026-28660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28660"
    },
    {
      "name": "CVE-2026-24088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24088"
    },
    {
      "name": "CVE-2026-28671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28671"
    },
    {
      "name": "CVE-2026-55256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55256"
    },
    {
      "name": "CVE-2026-34194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34194"
    },
    {
      "name": "CVE-2026-28633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28633"
    },
    {
      "name": "CVE-2026-12387",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12387"
    },
    {
      "name": "CVE-2026-45527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45527"
    },
    {
      "name": "CVE-2026-28662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28662"
    },
    {
      "name": "CVE-2026-5729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5729"
    },
    {
      "name": "CVE-2026-28631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28631"
    },
    {
      "name": "CVE-2026-55277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55277"
    },
    {
      "name": "CVE-2026-45196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45196"
    },
    {
      "name": "CVE-2026-0084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0084"
    },
    {
      "name": "CVE-2026-20481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20481"
    },
    {
      "name": "CVE-2026-28655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28655"
    },
    {
      "name": "CVE-2026-55273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55273"
    },
    {
      "name": "CVE-2026-28656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28656"
    },
    {
      "name": "CVE-2026-45521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45521"
    },
    {
      "name": "CVE-2026-45531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45531"
    },
    {
      "name": "CVE-2026-55285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55285"
    },
    {
      "name": "CVE-2026-49882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49882"
    },
    {
      "name": "CVE-2026-45195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45195"
    },
    {
      "name": "CVE-2026-49927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49927"
    },
    {
      "name": "CVE-2026-25260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25260"
    },
    {
      "name": "CVE-2026-28650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28650"
    },
    {
      "name": "CVE-2026-28594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28594"
    },
    {
      "name": "CVE-2026-21548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21548"
    },
    {
      "name": "CVE-2026-45520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45520"
    },
    {
      "name": "CVE-2026-24087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24087"
    },
    {
      "name": "CVE-2026-7639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7639"
    },
    {
      "name": "CVE-2026-45203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45203"
    },
    {
      "name": "CVE-2026-25294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25294"
    },
    {
      "name": "CVE-2026-49744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49744"
    },
    {
      "name": "CVE-2026-7476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7476"
    },
    {
      "name": "CVE-2026-28583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28583"
    },
    {
      "name": "CVE-2026-20501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20501"
    },
    {
      "name": "CVE-2026-28623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28623"
    },
    {
      "name": "CVE-2026-28609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28609"
    },
    {
      "name": "CVE-2026-28653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28653"
    },
    {
      "name": "CVE-2026-20461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20461"
    },
    {
      "name": "CVE-2026-33636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-33636"
    },
    {
      "name": "CVE-2026-4967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4967"
    },
    {
      "name": "CVE-2026-28652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28652"
    },
    {
      "name": "CVE-2026-20468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20468"
    },
    {
      "name": "CVE-2026-49743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49743"
    },
    {
      "name": "CVE-2026-21383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21383"
    },
    {
      "name": "CVE-2026-28636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28636"
    },
    {
      "name": "CVE-2026-28611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28611"
    },
    {
      "name": "CVE-2026-0010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0010"
    },
    {
      "name": "CVE-2026-21732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21732"
    },
    {
      "name": "CVE-2026-7477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7477"
    },
    {
      "name": "CVE-2025-48564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48564"
    },
    {
      "name": "CVE-2026-58941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58941"
    },
    {
      "name": "CVE-2026-58848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58848"
    },
    {
      "name": "CVE-2026-58823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58823"
    },
    {
      "name": "CVE-2026-28644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28644"
    },
    {
      "name": "CVE-2026-28616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28616"
    },
    {
      "name": "CVE-2026-0008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0008"
    },
    {
      "name": "CVE-2026-41156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41156"
    },
    {
      "name": "CVE-2026-49746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49746"
    },
    {
      "name": "CVE-2026-45525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45525"
    },
    {
      "name": "CVE-2026-12285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12285"
    },
    {
      "name": "CVE-2026-49745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49745"
    },
    {
      "name": "CVE-2026-49887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49887"
    },
    {
      "name": "CVE-2026-28612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28612"
    },
    {
      "name": "CVE-2026-45515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45515"
    },
    {
      "name": "CVE-2026-20500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20500"
    },
    {
      "name": "CVE-2026-25288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25288"
    },
    {
      "name": "CVE-2026-20457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20457"
    },
    {
      "name": "CVE-2026-28599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28599"
    },
    {
      "name": "CVE-2026-41157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-41157"
    },
    {
      "name": "CVE-2026-28630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28630"
    },
    {
      "name": "CVE-2026-45200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45200"
    },
    {
      "name": "CVE-2026-49913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49913"
    },
    {
      "name": "CVE-2026-49881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49881"
    },
    {
      "name": "CVE-2026-21553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21553"
    },
    {
      "name": "CVE-2026-24081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24081"
    },
    {
      "name": "CVE-2026-45202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45202"
    },
    {
      "name": "CVE-2026-24084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24084"
    },
    {
      "name": "CVE-2026-20459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20459"
    },
    {
      "name": "CVE-2026-20464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20464"
    },
    {
      "name": "CVE-2026-0065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0065"
    },
    {
      "name": "CVE-2026-28617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28617"
    },
    {
      "name": "CVE-2026-45518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45518"
    },
    {
      "name": "CVE-2026-28639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28639"
    },
    {
      "name": "CVE-2026-34195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34195"
    },
    {
      "name": "CVE-2026-20479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20479"
    },
    {
      "name": "CVE-2026-58822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58822"
    },
    {
      "name": "CVE-2026-20474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20474"
    },
    {
      "name": "CVE-2026-45528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45528"
    },
    {
      "name": "CVE-2026-58839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58839"
    },
    {
      "name": "CVE-2026-43049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43049"
    },
    {
      "name": "CVE-2026-28624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28624"
    },
    {
      "name": "CVE-2026-21549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21549"
    },
    {
      "name": "CVE-2026-20475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20475"
    },
    {
      "name": "CVE-2026-25275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25275"
    },
    {
      "name": "CVE-2026-49921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49921"
    },
    {
      "name": "CVE-2026-28626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28626"
    },
    {
      "name": "CVE-2026-28572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28572"
    },
    {
      "name": "CVE-2026-28593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28593"
    },
    {
      "name": "CVE-2026-21551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21551"
    },
    {
      "name": "CVE-2026-49919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49919"
    },
    {
      "name": "CVE-2026-58874",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-58874"
    },
    {
      "name": "CVE-2026-21550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21550"
    },
    {
      "name": "CVE-2026-49879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49879"
    },
    {
      "name": "CVE-2026-28604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28604"
    },
    {
      "name": "CVE-2026-31629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31629"
    },
    {
      "name": "CVE-2026-20467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20467"
    },
    {
      "name": "CVE-2026-49884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-49884"
    },
    {
      "name": "CVE-2026-55290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55290"
    }
  ],
  "initial_release_date": "2026-09-10T00:00:00",
  "last_revision_date": "2026-09-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1158",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": "2026-09-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
      "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01?hl=fr"
    }
  ]
}

CVE-2025-48564 (GCVE-0-2025-48564)

Vulnerability from cvelistv5 – Published: 2025-12-08 16:57 – Updated: 2026-09-08 18:04

Summary

In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 04:56 UTC

CWE

Elevation of privilege
CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 17 Affected: 16-qpr2 Affected: 16 Affected: 15 Affected: 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-48564",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T04:56:27.094623Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:24.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "17"
            },
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:21.056Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2025-48564",
    "datePublished": "2025-12-08T16:57:04.311Z",
    "dateReserved": "2025-05-22T18:11:40.405Z",
    "dateUpdated": "2026-09-08T18:04:21.056Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-48565 (GCVE-0-2025-48565)

Vulnerability from cvelistv5 – Published: 2025-12-08 16:57 – Updated: 2026-09-08 18:04

Summary

In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 04:56 UTC

CWE

Elevation of privilege
CWE-noinfo Not enough information

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 17 Affected: 16-qpr2 Affected: 16 Affected: 15 Affected: 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-48565",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T04:56:28.138138Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:24.472Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "17"
            },
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:23.159Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2025-48565",
    "datePublished": "2025-12-08T16:57:05.400Z",
    "dateReserved": "2025-05-22T18:11:40.405Z",
    "dateUpdated": "2026-09-08T18:04:23.159Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-48566 (GCVE-0-2025-48566)

Vulnerability from cvelistv5 – Published: 2025-12-08 16:57 – Updated: 2026-09-08 18:04

Summary

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 04:56 UTC

CWE

Elevation of privilege
CWE-20 - Improper Input Validation

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 17 Affected: 16-qpr2 Affected: 16 Affected: 15 Affected: 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-48566",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T04:56:29.278026Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:23.994Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "17"
            },
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:25.248Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2025-48566",
    "datePublished": "2025-12-08T16:57:06.427Z",
    "dateReserved": "2025-05-22T18:11:40.405Z",
    "dateUpdated": "2026-09-08T18:04:25.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-48651 (GCVE-0-2025-48651)

Vulnerability from cvelistv5 – Published: 2026-04-06 18:20 – Updated: 2026-09-08 18:04

Summary

In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-13 20:16 UTC

CWE

Unknown
CWE-20 - Improper Input Validation

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: Android SoC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-48651",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T20:16:17.174536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T16:33:53.392Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "Android SoC"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Unknown",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:27.364Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2025-48651",
    "datePublished": "2026-04-06T18:20:31.044Z",
    "dateReserved": "2025-05-22T18:12:46.995Z",
    "dateUpdated": "2026-09-08T18:04:27.364Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0001 (GCVE-0-2026-0001)

Vulnerability from cvelistv5 – Published: 2026-09-08 14:18 – Updated: 2026-09-08 14:36

Title

Mali GPU Kernel Driver allows access to already freed memory

Summary

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-08 14:36 UTC

CWE

CWE-416 - Use After Free

Assigner

Arm mitre root

References

1 reference

URL	Tags
https://support.arm.com/documentation/111552/1-0/…

Impacted products

3 products

Vendor	Product	Version
Arm Ltd	Bifrost GPU Kernel Driver	Affected: r41p0 , ≤ r49p5 (patch) Affected: r50p0 , ≤ r51p0 (patch) Affected: r54p1 , ≤ r54p2 (patch)
Arm Ltd	Valhall GPU Kernel Driver	Affected: r41p0 , ≤ r49p5 (patch) Affected: r50p0 , ≤ r54p3 (patch) Affected: r55p0 (patch) Unaffected: r56p0 (patch)
Arm Ltd	Arm 5th Gen GPU Architecture Kernel Driver	Affected: r41p0 , ≤ r49p5 (patch) Affected: r50p0 , ≤ r54p3 (patch) Affected: r55p0 (patch) Unaffected: r56p0 (patch)

Credits

PhysicalLab (Kihyun Jeong, Yuchan Nam, Hyungjung Joo, Hojun Lee, Yunje Shin, Han Lee, seeh0)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 4.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0001",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-08T14:36:33.816864Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T14:36:37.191Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Bifrost GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r49p5",
              "status": "affected",
              "version": "r41p0",
              "versionType": "patch"
            },
            {
              "lessThanOrEqual": "r51p0",
              "status": "affected",
              "version": "r50p0",
              "versionType": "patch"
            },
            {
              "lessThanOrEqual": "r54p2",
              "status": "affected",
              "version": "r54p1",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Valhall GPU Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r49p5",
              "status": "affected",
              "version": "r41p0",
              "versionType": "patch"
            },
            {
              "lessThanOrEqual": "r54p3",
              "status": "affected",
              "version": "r50p0",
              "versionType": "patch"
            },
            {
              "status": "affected",
              "version": "r55p0",
              "versionType": "patch"
            },
            {
              "status": "unaffected",
              "version": "r56p0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Arm 5th Gen GPU Architecture Kernel Driver",
          "vendor": "Arm Ltd",
          "versions": [
            {
              "lessThanOrEqual": "r49p5",
              "status": "affected",
              "version": "r41p0",
              "versionType": "patch"
            },
            {
              "lessThanOrEqual": "r54p3",
              "status": "affected",
              "version": "r50p0",
              "versionType": "patch"
            },
            {
              "status": "affected",
              "version": "r55p0",
              "versionType": "patch"
            },
            {
              "status": "unaffected",
              "version": "r56p0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "PhysicalLab (Kihyun Jeong, Yuchan Nam, Hyungjung Joo, Hojun Lee, Yunje Shin, Han Lee, seeh0)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eUse After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory.\u003c/p\u003e\u003cp\u003eThis issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.\u003c/p\u003e"
            }
          ],
          "value": "Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory.\n\n\n\nThis issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T14:18:57.227Z",
        "orgId": "56a131ea-b967-4a0d-a41e-5f3549952846",
        "shortName": "Arm"
      },
      "references": [
        {
          "url": "https://support.arm.com/documentation/111552/1-0/?lang=en"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThis issue has been fixed in the following versions: Valhall GPU Kernel Driver: r56p0; Arm 5th Gen GPU Architecture Kernel Driver: r56p0. Arm partners are recommended to upgrade to the latest applicable version as soon as possible.\u003c/p\u003e"
            }
          ],
          "value": "This issue has been fixed in the following versions: Valhall GPU Kernel Driver: r56p0; Arm 5th Gen GPU Architecture Kernel Driver: r56p0. Arm partners are recommended to upgrade to the latest applicable version as soon as possible."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Mali GPU Kernel Driver allows access to already freed memory",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "56a131ea-b967-4a0d-a41e-5f3549952846",
    "assignerShortName": "Arm",
    "cveId": "CVE-2026-0001",
    "datePublished": "2026-09-08T14:18:57.227Z",
    "dateReserved": "2025-10-09T10:18:31.149Z",
    "dateUpdated": "2026-09-08T14:36:37.191Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0008 (GCVE-0-2026-0008)

Vulnerability from cvelistv5 – Published: 2026-03-02 18:42 – Updated: 2026-09-08 18:04

Summary

In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-02 00:00 UTC

CWE

Elevation of privilege
CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 16-qpr2 Affected: 16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0008",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-02T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-441",
                "description": "CWE-441 Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-03T04:56:52.725Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:29.490Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2026-0008",
    "datePublished": "2026-03-02T18:42:34.208Z",
    "dateReserved": "2025-10-15T15:38:35.601Z",
    "dateUpdated": "2026-09-08T18:04:29.490Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0010 (GCVE-0-2026-0010)

Vulnerability from cvelistv5 – Published: 2026-03-02 18:42 – Updated: 2026-09-08 18:04

Summary

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-03 00:00 UTC

CWE

Elevation of privilege
CWE-787 - Out-of-bounds Write

Assigner

google_android Google root

References

3 references

URL	Tags
https://source.android.com/docs/security/bulletin…
http://www.openwall.com/lists/oss-security/2026/07/28/4
http://seclists.org/fulldisclosure/2026/Aug/111

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 16-qpr2 Affected: 16 Affected: 15 Affected: 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 8.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0010",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-04T04:55:26.102Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-26T18:37:17.536Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/07/28/4"
          },
          {
            "url": "http://seclists.org/fulldisclosure/2026/Aug/111"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:31.597Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2026-0010",
    "datePublished": "2026-03-02T18:42:35.324Z",
    "dateReserved": "2025-10-15T15:38:39.086Z",
    "dateUpdated": "2026-09-08T18:04:31.597Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0054 (GCVE-0-2026-0054)

Vulnerability from cvelistv5 – Published: 2026-09-08 18:04 – Updated: 2026-09-10 17:15

Summary

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 17:14 UTC

CWE

Information disclosure
CWE-862 - Missing Authorization

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 16-qpr2 Affected: 16 Affected: 15 Affected: 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 3.3,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0054",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T17:14:20.431706Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T17:15:50.333Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information disclosure",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:32.667Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2026-0054",
    "datePublished": "2026-09-08T18:04:32.667Z",
    "dateReserved": "2025-10-15T15:39:50.964Z",
    "dateUpdated": "2026-09-10T17:15:50.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0065 (GCVE-0-2026-0065)

Vulnerability from cvelistv5 – Published: 2026-09-08 18:04 – Updated: 2026-09-10 15:02

Summary

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 03:56 UTC

CWE

Elevation of privilege
CWE-693 - Protection Mechanism Failure

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 16-qpr2 Affected: 16 Affected: 15 Affected: 14

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0065",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T03:56:54.098010Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T15:02:10.680Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "15"
            },
            {
              "status": "affected",
              "version": "14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:33.732Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2026-0065",
    "datePublished": "2026-09-08T18:04:33.732Z",
    "dateReserved": "2025-10-15T15:40:46.007Z",
    "dateUpdated": "2026-09-10T15:02:10.680Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0084 (GCVE-0-2026-0084)

Vulnerability from cvelistv5 – Published: 2026-09-08 18:04 – Updated: 2026-09-10 15:02

Summary

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 03:56 UTC

CWE

Elevation of privilege
CWE-693 - Protection Mechanism Failure

Assigner

google_android Google root

References

1 reference

URL	Tags
https://source.android.com/docs/security/bulletin…

Impacted products

1 product

Vendor	Product	Version
Google	Android	Affected: 16-qpr2 Affected: 16

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-0084",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T03:56:54.776721Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-693",
                "description": "CWE-693 Protection Mechanism Failure",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T15:02:44.549Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Android",
          "vendor": "Google",
          "versions": [
            {
              "status": "affected",
              "version": "16-qpr2"
            },
            {
              "status": "affected",
              "version": "16"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of privilege",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T18:04:34.795Z",
        "orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
        "shortName": "google_android"
      },
      "references": [
        {
          "url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.7.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
    "assignerShortName": "google_android",
    "cveId": "CVE-2026-0084",
    "datePublished": "2026-09-08T18:04:34.795Z",
    "dateReserved": "2025-10-15T15:42:18.218Z",
    "dateUpdated": "2026-09-10T15:02:44.549Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CERTFR-2026-AVI-1158

Solutions

CVE-2025-48564 (GCVE-0-2025-48564)

CVE-2025-48565 (GCVE-0-2025-48565)

CVE-2025-48566 (GCVE-0-2025-48566)

CVE-2025-48651 (GCVE-0-2025-48651)

CVE-2026-0001 (GCVE-0-2026-0001)

CVE-2026-0008 (GCVE-0-2026-0008)

CVE-2026-0010 (GCVE-0-2026-0010)

CVE-2026-0054 (GCVE-0-2026-0054)

CVE-2026-0065 (GCVE-0-2026-0065)

CVE-2026-0084 (GCVE-0-2026-0084)

Tags

Sightings

Nomenclature