CVE Vulnerability Database
Search and browse 420,229 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-49931 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused dep... |
| CVE-2026-49924 | MEDIUM | 6.2 | 0.1% | Nov 2, 2026 | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to re... |
| CVE-2026-49923 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the... |
| CVE-2026-49922 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confus... |
| CVE-2026-49912 | MEDIUM | 4 | 0.1% | Nov 2, 2026 | In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due ... |
| CVE-2026-45514 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic err... |
| CVE-2026-28665 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to imprope... |
| CVE-2026-28645 | MEDIUM | 6.8 | 0.1% | Nov 2, 2026 | In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a log... |
| CVE-2026-28643 | MEDIUM | 6.2 | 0.1% | Nov 2, 2026 | In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local... |
| CVE-2026-28632 | MEDIUM | 4 | 0.1% | Nov 2, 2026 | In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This cou... |
| CVE-2026-28621 | MEDIUM | 4 | 0.1% | Nov 2, 2026 | In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. ... |
| CVE-2026-28597 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper inp... |
| CVE-2026-28588 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to... |
| CVE-2026-120689 | MEDIUM | 4.3 | 0.2% | Nov 2, 2026 | HDF5 through 2.2.0 contains an uncontrolled recursion vulnerability in H5B__iterate_helper() in src/H5B.c. When iteratin... |
| CVE-2026-119740 | MEDIUM | 6.8 | 0.8% | Nov 2, 2026 | Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART... |
| CVE-2026-119739 | MEDIUM | 5.3 | 0.4% | Nov 2, 2026 | The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlo... |
| CVE-2026-119738 | MEDIUM | 5.3 | 0.3% | Nov 2, 2026 | The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlo... |
| CVE-2026-119737 | HIGH | 7.8 | 0.9% | Nov 2, 2026 | The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, c... |
| CVE-2026-117082 | — | — | 0.2% | Nov 2, 2026 | An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dua... |
| CVE-2026-116769 | CRITICAL | 9.3 | 0.4% | Nov 2, 2026 | CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior ... |
| CVE-2026-102435 | CRITICAL | 9.8 | 0.6% | Nov 2, 2026 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient fi... |
| CVE-2026-0053 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to in... |
| CVE-2025-26433 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay a... |
| CVE-2025-22436 | HIGH | 8.4 | 0.1% | Nov 2, 2026 | In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/ove... |
| CVE-2026-81938 | HIGH | 7.7 | — | Nov 2, 2026 | Grafana Mimir's Alertmanager rejects tenant-supplied receiver configurations that reference local files, but the check d... |