DeutschShown in its original language — a full translation is planned for a future version.
Android Patchday Juni 2026: Mehrere Schwachstellen
view advisory published 2026-06-17
Ein Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-28615US | high7.8OT elevated | — | ||
In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. This could lead to local escalation of privilege with no additional executi… | ||||
| CVE-2026-28587US | medium5.5OT elevated | — | ||
In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive information due to a missing permission check. This could lead to local information disclosu… | ||||
| CVE-2026-28576US | medium5.5 | Exploit | ||
In Contacts Provider, there is a possible way to access the contacts database due to SQL injection. This could lead to local information disclosure with no additional execution pri… | ||||
| CVE-2026-28575US | medium5.5 | — | ||
In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm/PackageInstallerSession.java, there is a possible memory exhaustion attack due to a… | ||||
| CVE-2026-0092US | —OT elevated | Exploit | ||
In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional executi… | ||||
| CVE-2026-0083US | high7.0 | — | ||
In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileg… | ||||
| CVE-2026-0082US | high7.8 | — | ||
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalat… | ||||
| CVE-2026-0081US | high7.8OT elevated | — | ||
In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges ne… | ||||
| CVE-2026-0071US | high7.8OT elevated | — | ||
In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile… | ||||
| CVE-2026-0068US | high7.8 | — | ||
In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due to desync from persistence. Th… | ||||
| CVE-2026-0064US | medium5.5 | — | ||
In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges… | ||||
| CVE-2026-0063US | high7.8 | — | ||
In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This could lead to local escalation o… | ||||
| CVE-2026-0057US | —OT elevated | — | ||
In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local informat… | ||||
| CVE-2026-0019US | — | — | ||
In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privilege with no additional execution… | ||||
| CVE-2025-48643US | — | — | ||
In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privil… | ||||
| CVE-2025-48640US | —OT elevated | — | ||
In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (proximal/adjacent) escalation of p… | ||||
| CVE-2025-48617US | —OT elevated | Exploit | ||
In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions bypass. This could lead to local escalation of privilege with no add… | ||||
| CVE-2025-48571US | — | — | ||
In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information discl… | ||||
| CVE-2023-40132US | —OT elevated | — | ||
In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to l… | ||||
| CVE-2023-40108US | — | — | ||
In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure… | ||||
showing 20 of 22
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan