In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into...
CVE-2026-0096
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to mi
2026-06-02 归档
今日共收录 1188 条安全情报，包含 407 个 CVE，402 篇安全通告，以及 101 篇研究论文。
← 返回归档列表Memory corruption in windows drivers while sending incorrect trusted application request
CVE-2025-59612
Memory corruption in windows drivers while sending incorrect trusted application request
Memory Corruption when output buffer size is smaller than input buffer size during data copying...
CVE-2025-59613
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
Memory Corruption when running a memory copy operation due to invalid writes caused by a null...
CVE-2025-59604
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
Information Disclosure when processing advertisement frames with malformed MBSSID elements of...
CVE-2025-59609
Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length.
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This
In multiple functions of DevicePolicyManagerService.java, there is a possible desync from...
CVE-2026-28578
In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper in
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of...
CVE-2026-0043
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer
In multiple functions of WindowState.java, there is a possible way to trick a user into accepting...
CVE-2026-0061
In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to...
CVE-2026-0087
In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due...
CVE-2026-0059
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overfl
In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data...
CVE-2026-0086
In onCreate of DisableSupervisionActivity.kt, there is a possible way to delete supervision data due to a missing null c
In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device...
CVE-2026-0055
In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC)
In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource...
CVE-2026-0069
In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could
In multiple functions of PackageInstallerService.java, there is a possible way to install...
CVE-2026-0089
In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missi
In hide of WindowState.java, there is a possible way to trick the user into approving permissions...
CVE-2026-0048
In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/ov
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an...
CVE-2026-0041
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow. This
In multiple locations, there is a possible way to execute code in the launcher process due to an...
CVE-2026-0091
In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell u
In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a...
CVE-2026-0046
In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapj
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system...
CVE-2026-0051
In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper inp