Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page.EPSS 0.2%Oct 6, 2026
- UnknownCVE-2026-96587 is listed by Viidure Dashcam Android Application.Sep 29, 2026
- UnknownCVE-2026-94204 is listed by Viidure Dashcam Android Application.Sep 29, 2026
- UnknownCVE-2026-18320 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.EPSS 0.2%Sep 25, 2026
- UnknownCVE-2026-18312 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.EPSS 0.2%Sep 25, 2026
- UnknownCVE-2026-18311 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.EPSS 0.2%Sep 25, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScr…EPSS 0.2%Sep 14, 2026
- High8.4Android Framework Integer Overflow VulnerabilityKEVEPSS 1.7%Jun 1, 2026
- Low2.4AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock.EPSS 0.2%May 26, 2026
- Low2.4SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the PIN lock.EPSS 0.2%May 26, 2026
- Low2.4Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock.EPSS 0.2%May 26, 2026
- Medium5.2SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts V…EPSS 0.2%May 26, 2026
- Medium4.6Android App "RoboForm Password Manager" provided by Siber Systems, Inc.May 20, 2026
- High7.5Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary code inside a san…May 20, 2026
- Medium6.5Spoofing issue in the Toolbar component in Firefox for Android.EPSS 0.3%May 19, 2026
- High7.5Sandbox escape in Firefox and Firefox Focus for Android.EPSS 0.4%May 19, 2026
- Medium5.3Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obta…May 14, 2026
- Low3.1Insufficient policy enforcement in Network in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to le…May 14, 2026
- High8.3Insufficient policy enforcement in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potent…May 14, 2026
- Medium4.3Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a…May 14, 2026
- Medium4.2Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page.May 14, 2026
- Medium4.3Heap buffer overflow in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.May 14, 2026
- Medium5.4Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.May 14, 2026
- High8.3Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a…May 14, 2026
- Medium6.3Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.May 14, 2026