Google Android vulnerabilities
6,771 known vulnerabilities affecting google/android.
Total CVEs
6,771
CISA KEV
13
actively exploited
Public exploits
50
Exploited in wild
24
Severity breakdown
CRITICAL472HIGH2821MEDIUM3190LOW252UNKNOWN36
Vulnerabilities
Page 226 of 339
CVE-2023-42650P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42650 [MEDIUM] CWE-862 CVE-2023-42650: In engineermode, there is a possible missing permission check. This could lead to local information
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42641P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42641 [MEDIUM] CWE-862 CVE-2023-42641: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42633P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42633 [MEDIUM] CWE-862 CVE-2023-42633: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42638P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42638 [MEDIUM] CWE-862 CVE-2023-42638: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42642P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42642 [MEDIUM] CWE-862 CVE-2023-42642: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42652P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42652 [MEDIUM] CWE-862 CVE-2023-42652: In engineermode, there is a possible missing permission check. This could lead to local information
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42651P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42651 [MEDIUM] CWE-862 CVE-2023-42651: In engineermode, there is a possible missing permission check. This could lead to local information
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42646P4MEDIUMCVSS 5.5v10.0v11.0+2 more2023-11-01
CVE-2023-42646 [MEDIUM] CWE-862 CVE-2023-42646: In Ifaa service, there is a possible missing permission check. This could lead to local information
In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42632P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42632 [MEDIUM] CWE-862 CVE-2023-42632: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42639P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42639 [MEDIUM] CWE-862 CVE-2023-42639: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42644P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42644 [MEDIUM] CWE-862 CVE-2023-42644: In dm service, there is a possible missing permission check. This could lead to local information di
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-42643P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42643 [MEDIUM] CWE-862 CVE-2023-42643: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2025-26448P4MEDIUMCVSS 5.5v13.0v14.0+4 more2025-09-04
CVE-2025-26448 [MEDIUM] CWE-457 CVE-2025-26448: In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized da
In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2023-42654P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42654 [MEDIUM] CWE-862 CVE-2023-42654: In dm service, there is a possible missing permission check. This could lead to local information di
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2025-26442P4MEDIUMCVSS 5.5v13.0v14.0+4 more2025-09-04
CVE-2025-26442 [MEDIUM] CWE-863 CVE-2025-26442: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verificati
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2023-42631P4MEDIUMCVSS 5.5v11.0v12.0+1 more2023-11-01
CVE-2023-42631 [MEDIUM] CWE-862 CVE-2023-42631: In validationtools, there is a possible missing permission check. This could lead to local informati
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2023-40650P4MEDIUMCVSS 5.5v11.0v12.02023-10-08
CVE-2023-40650 [MEDIUM] CWE-862 CVE-2023-40650: In Telecom service, there is a possible missing permission check. This could lead to local informati
In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
nvd
CVE-2024-44099P4MEDIUMCVSS 5.5vAndroid kernel2024-10-25
CVE-2024-44099 [MEDIUM] CWE-863 CVE-2024-44099: There is a possible Local bypass of user interaction due to an insecure default value. This could le
There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2018-9410P4MEDIUMCVSS 5.5v8.0v8.1+2 more2024-11-19
CVE-2018-9410 [MEDIUM] CWE-125 CVE-2018-9410: In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds chec
In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd
CVE-2024-32930P4MEDIUMCVSS 5.5vAndroid kernel2024-06-13
CVE-2024-32930 [MEDIUM] CWE-665 CVE-2024-32930: In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitializ
In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd