Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Priority LOW 24

In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00119 Published 2026-06-01 No fix listed CWE-20
Priority LOW 15

In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00104 Published 2026-06-01 No fix listed CWE-269
TI-2026-00014 CVE-2026-0017 · GHSA-7332-r538-h7hp

Improper authorization in Google Android

Priority LOW 35

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00202 Published 2026-03-02 No fix listed CWE-285