NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Advisory ansehen veröffentlicht 2026-06-02
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung mobile devices relevante kwetsbaarheden verholpen in Samsung Mobile.
01
beschreibt (77)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-23787US | — | — | ||
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver (due to im… | ||||
| CVE-2026-21031US | high7.8OT erhöht | — | ||
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerabilit… | ||||
| CVE-2026-21030US | high7.8 | — | ||
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions. | ||||
| CVE-2026-21029US | high7.8 | — | ||
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations. | ||||
| CVE-2026-21028US | medium5.5 | — | ||
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | ||||
| CVE-2026-21027US | low3.3 | — | ||
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function. | ||||
| CVE-2026-21026US | medium5.5 | — | ||
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information. | ||||
| CVE-2026-21025US | medium5.5 | — | ||
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | ||||
| CVE-2026-21017US | medium5.5 | Exploit | ||
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files. | ||||
| CVE-2026-25277US | — | — | ||
Memory corruption while using Strongbox due to buffer overflow. | ||||
| CVE-2026-25276US | — | — | ||
Memory corruption while using Strongbox due to missing bounds check. | ||||
| CVE-2026-24089US | — | — | ||
Memory corruption while processing fastboot commands with invalid input. | ||||
| CVE-2026-24085US | — | — | ||
Memory Corruption when processing display command line information due to improper initialization of a variable. | ||||
| CVE-2025-59606US | — | — | ||
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization. | ||||
| CVE-2025-59605US | — | — | ||
Memory Corruption when processing device identifier strings that exceed the expected maximum length. | ||||
| CVE-2025-59604US | — | — | ||
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. | ||||
| CVE-2026-28586US | — | — | ||
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no addit… | ||||
| CVE-2026-28580US | — | — | ||
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution pri… | ||||
| CVE-2026-28578US | — | — | ||
In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service w… | ||||
| CVE-2026-28577US | — | — | ||
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additio… | ||||
20 von 77 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan