Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.34%Apr 15, 2026
- High7.5Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to exec…Check if you run itEPSS 0.36%Apr 15, 2026
- High8.8Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to e…Check if you run itEPSS 0.41%Apr 15, 2026
- Medium6.8External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.Check if you run itEPSS 0.09%Apr 13, 2026
- Medium5.4Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.Check if you run itEPSS 0.15%Apr 13, 2026
- High7.8Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.Check if you run itEPSS 0.10%Apr 13, 2026
- Medium4.1Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.1Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.Check if you run itEPSS 0.16%Apr 13, 2026
- Medium4.4Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.Check if you run itEPSS 0.16%Apr 13, 2026
- Medium4.7Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.Check if you run itEPSS 0.13%Apr 13, 2026
- Medium5.2Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.Check if you run itEPSS 0.16%Apr 13, 2026
- High8.6OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions.Check if you run itEPSS 0.54%Apr 10, 2026
- High8.7This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or…Check if you run itEPSS 0.31%Apr 10, 2026
- Medium4.3Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a craf…Check if you run itEPSS 0.24%Apr 8, 2026
- Critical9.8Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata vi…Check if you run itEPSS 0.33%Apr 8, 2026
- High8.4ALEAPP (Android Logs Events And Protobuf Parser) through 3.4.0 contains a path traversal vulnerability in the NQ_Vault.py artifact parser that uses attacker-controlled…Check if you run itEPSS 0.20%Apr 8, 2026
- Critical9.1An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate…Check if you run itEPSS 0.46%Apr 7, 2026
- High8.8Mobile Next is an MCP server for mobile development and automation.Check if you run itEPSS 0.45%Apr 6, 2026
- Low2.9A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android.Check if you run itEPSS 0.28%Apr 6, 2026
- Medium6.2In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion.Check if you run itEPSS 0.10%Apr 6, 2026
- Medium5.5In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation.Check if you run itEPSS 0.10%Apr 6, 2026
- Low1.9A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- Low1.9A vulnerability was identified in Wahoo Fitness SYSTM App up to 7.2.1 on Android.Check if you run itEPSS 0.17%Apr 3, 2026
- Low1.9A weakness has been identified in Noelse Individuals & Pro App up to 2.1.7 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- Low1.9A security flaw has been discovered in PropertyGuru AgentNet Singapore App up to 23.7.10 on Android.Check if you run itEPSS 0.15%Apr 3, 2026