https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-49906/https://vulnfeed.org/cve/CVE-2026-49906/Mon, 02 Nov 2026 21:17:31 +0000An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the `android.car.cluster.NAVIGATION` category and requesting navigation app focus. The privileged `ClusterHomeSample` application, acting as a confused deputy, resolves and launches this arbitrary third-party activity on the safety-critical instrument cluster display without enforcing the necessary permission check, allowing for persistent display of potentially misleading or distracting content.https://vulnfeed.org/cve/CVE-2026-59042/https://vulnfeed.org/cve/CVE-2026-59042/Mon, 02 Nov 2026 20:17:57 +0000In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59043/https://vulnfeed.org/cve/CVE-2026-59043/Mon, 02 Nov 2026 20:17:57 +0000In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59045/https://vulnfeed.org/cve/CVE-2026-59045/Mon, 02 Nov 2026 20:17:57 +0000In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59016/https://vulnfeed.org/cve/CVE-2026-59016/Mon, 02 Nov 2026 20:17:56 +0000In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59004/https://vulnfeed.org/cve/CVE-2026-59004/Mon, 02 Nov 2026 20:17:55 +0000In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58968/https://vulnfeed.org/cve/CVE-2026-58968/Mon, 02 Nov 2026 20:17:53 +0000In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58974/https://vulnfeed.org/cve/CVE-2026-58974/Mon, 02 Nov 2026 20:17:53 +0000In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58957/https://vulnfeed.org/cve/CVE-2026-58957/Mon, 02 Nov 2026 20:17:52 +0000In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58962/https://vulnfeed.org/cve/CVE-2026-58962/Mon, 02 Nov 2026 20:17:52 +0000In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58964/https://vulnfeed.org/cve/CVE-2026-58964/Mon, 02 Nov 2026 20:17:52 +0000In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58966/https://vulnfeed.org/cve/CVE-2026-58966/Mon, 02 Nov 2026 20:17:52 +0000In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58944/https://vulnfeed.org/cve/CVE-2026-58944/Mon, 02 Nov 2026 20:17:51 +0000In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58946/https://vulnfeed.org/cve/CVE-2026-58946/Mon, 02 Nov 2026 20:17:51 +0000In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58934/https://vulnfeed.org/cve/CVE-2026-58934/Mon, 02 Nov 2026 20:17:50 +0000In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58866/https://vulnfeed.org/cve/CVE-2026-58866/Mon, 02 Nov 2026 20:17:49 +0000In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58867/https://vulnfeed.org/cve/CVE-2026-58867/Mon, 02 Nov 2026 20:17:49 +0000In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58836/https://vulnfeed.org/cve/CVE-2026-58836/Mon, 02 Nov 2026 20:17:48 +0000In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded application to modify the package source during a self-update due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58837/https://vulnfeed.org/cve/CVE-2026-58837/Mon, 02 Nov 2026 20:17:48 +0000In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58853/https://vulnfeed.org/cve/CVE-2026-58853/Mon, 02 Nov 2026 20:17:48 +0000In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55287/https://vulnfeed.org/cve/CVE-2026-55287/Mon, 02 Nov 2026 20:17:45 +0000In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55271/https://vulnfeed.org/cve/CVE-2026-55271/Mon, 02 Nov 2026 20:17:44 +0000In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55263/https://vulnfeed.org/cve/CVE-2026-55263/Mon, 02 Nov 2026 20:17:44 +0000In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55257/https://vulnfeed.org/cve/CVE-2026-55257/Mon, 02 Nov 2026 20:17:43 +0000In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-45514/https://vulnfeed.org/cve/CVE-2026-45514/Mon, 02 Nov 2026 20:17:42 +0000In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-49923/https://vulnfeed.org/cve/CVE-2026-49923/Mon, 02 Nov 2026 20:17:42 +0000In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-28588/https://vulnfeed.org/cve/CVE-2026-28588/Mon, 02 Nov 2026 20:17:41 +0000In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-28597/https://vulnfeed.org/cve/CVE-2026-28597/Mon, 02 Nov 2026 20:17:41 +0000In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59044/https://vulnfeed.org/cve/CVE-2026-59044/Mon, 02 Nov 2026 19:55:10 +0000In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59028/https://vulnfeed.org/cve/CVE-2026-59028/Mon, 02 Nov 2026 19:55:06 +0000In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59014/https://vulnfeed.org/cve/CVE-2026-59014/Mon, 02 Nov 2026 19:55:00 +0000In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59005/https://vulnfeed.org/cve/CVE-2026-59005/Mon, 02 Nov 2026 19:54:53 +0000In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-59000/https://vulnfeed.org/cve/CVE-2026-59000/Mon, 02 Nov 2026 19:54:48 +0000In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58995/https://vulnfeed.org/cve/CVE-2026-58995/Mon, 02 Nov 2026 19:54:46 +0000In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58994/https://vulnfeed.org/cve/CVE-2026-58994/Mon, 02 Nov 2026 19:54:45 +0000In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58989/https://vulnfeed.org/cve/CVE-2026-58989/Mon, 02 Nov 2026 19:54:43 +0000In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58986/https://vulnfeed.org/cve/CVE-2026-58986/Mon, 02 Nov 2026 19:54:41 +0000In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58984/https://vulnfeed.org/cve/CVE-2026-58984/Mon, 02 Nov 2026 19:54:39 +0000In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58979/https://vulnfeed.org/cve/CVE-2026-58979/Mon, 02 Nov 2026 19:54:38 +0000In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58975/https://vulnfeed.org/cve/CVE-2026-58975/Mon, 02 Nov 2026 19:54:35 +0000In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58970/https://vulnfeed.org/cve/CVE-2026-58970/Mon, 02 Nov 2026 19:54:32 +0000In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58965/https://vulnfeed.org/cve/CVE-2026-58965/Mon, 02 Nov 2026 19:54:28 +0000In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58956/https://vulnfeed.org/cve/CVE-2026-58956/Mon, 02 Nov 2026 19:54:22 +0000In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58943/https://vulnfeed.org/cve/CVE-2026-58943/Mon, 02 Nov 2026 19:54:13 +0000In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58942/https://vulnfeed.org/cve/CVE-2026-58942/Mon, 02 Nov 2026 19:54:12 +0000In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58885/https://vulnfeed.org/cve/CVE-2026-58885/Mon, 02 Nov 2026 19:54:05 +0000In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58884/https://vulnfeed.org/cve/CVE-2026-58884/Mon, 02 Nov 2026 19:54:04 +0000In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58879/https://vulnfeed.org/cve/CVE-2026-58879/Mon, 02 Nov 2026 19:54:01 +0000In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58871/https://vulnfeed.org/cve/CVE-2026-58871/Mon, 02 Nov 2026 19:53:57 +0000In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58847/https://vulnfeed.org/cve/CVE-2026-58847/Mon, 02 Nov 2026 19:53:50 +0000In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58845/https://vulnfeed.org/cve/CVE-2026-58845/Mon, 02 Nov 2026 19:53:49 +0000In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58844/https://vulnfeed.org/cve/CVE-2026-58844/Mon, 02 Nov 2026 19:53:48 +0000In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58829/https://vulnfeed.org/cve/CVE-2026-58829/Mon, 02 Nov 2026 19:53:44 +0000In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58828/https://vulnfeed.org/cve/CVE-2026-58828/Mon, 02 Nov 2026 19:53:43 +0000In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58827/https://vulnfeed.org/cve/CVE-2026-58827/Mon, 02 Nov 2026 19:53:42 +0000In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58826/https://vulnfeed.org/cve/CVE-2026-58826/Mon, 02 Nov 2026 19:53:41 +0000In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58825/https://vulnfeed.org/cve/CVE-2026-58825/Mon, 02 Nov 2026 19:53:40 +0000In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-58824/https://vulnfeed.org/cve/CVE-2026-58824/Mon, 02 Nov 2026 19:53:39 +0000In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55289/https://vulnfeed.org/cve/CVE-2026-55289/Mon, 02 Nov 2026 19:53:33 +0000In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55288/https://vulnfeed.org/cve/CVE-2026-55288/Mon, 02 Nov 2026 19:53:32 +0000In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55283/https://vulnfeed.org/cve/CVE-2026-55283/Mon, 02 Nov 2026 19:53:30 +0000In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55275/https://vulnfeed.org/cve/CVE-2026-55275/Mon, 02 Nov 2026 19:53:29 +0000In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55262/https://vulnfeed.org/cve/CVE-2026-55262/Mon, 02 Nov 2026 19:53:24 +0000In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-55261/https://vulnfeed.org/cve/CVE-2026-55261/Mon, 02 Nov 2026 19:53:23 +0000In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-49934/https://vulnfeed.org/cve/CVE-2026-49934/Mon, 02 Nov 2026 19:53:19 +0000In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.https://vulnfeed.org/cve/CVE-2026-49931/https://vulnfeed.org/cve/CVE-2026-49931/Mon, 02 Nov 2026 19:53:15 +0000In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-49922/https://vulnfeed.org/cve/CVE-2026-49922/Mon, 02 Nov 2026 19:53:12 +0000In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-28665/https://vulnfeed.org/cve/CVE-2026-28665/Mon, 02 Nov 2026 19:53:09 +0000In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2026-0053/https://vulnfeed.org/cve/CVE-2026-0053/Mon, 02 Nov 2026 19:52:57 +0000In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient isolation between Android users. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.https://vulnfeed.org/cve/CVE-2025-22436/https://vulnfeed.org/cve/CVE-2025-22436/Mon, 02 Nov 2026 19:52:51 +0000In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.