Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

BDU:2026-07754 (CVE-2026-28574)

Vulnerability from fstec – Published: 2026-06-04 – Updated: 2026-06-04 – View on bdu.fstec.ru Fixed

Title

Уязвимость метода onNullBinding класса HostEmulationManager.java операционных систем Android, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость метода onServiceConnected операционных систем Android вызвана ситуацией гонки. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

7.8 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Timing and state manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-362 - Одновременное выполнение с использованием общего ресурса с неправильной синхронизацией («Ситуация гонки»)

Aliases

CVE-2026-28574

References

1 reference

URL
https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=ru

Impacted products

1 product from 1 vendor

Vendors

Google Inc

Products

Android

Versions

16 (Android), 16-qpr2 (Android)

Product types

Operating system

Platforms

Google Inc Android 16, Google Inc Android 16-qpr2

Mitigations

Использование рекомендаций: https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=ru

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Google Inc",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16 (Android), 16-qpr2 (Android)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=ru",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "01.06.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "04.06.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "04.06.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-07754",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-28574",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Android",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Google Inc Android 16 , Google Inc Android 16-qpr2 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 onNullBinding \u043a\u043b\u0430\u0441\u0441\u0430 HostEmulationManager.java \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0435\u0439 (\u00ab\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438\u00bb) (CWE-362)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 onServiceConnected \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Android \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439 \u0433\u043e\u043d\u043a\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=ru",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-362",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CERTFR-2026-AVI-0679

Vulnerability from certfr_avis - Published: 2026-06-02 - Updated: 2026-06-02

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Google indique que la vulnérabilité CVE-2025-48595 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions antérieures à 14, 15, 16, 16-qpr2 et Filet avant le correctif du 1er juin 2026

References

Title

Publication Time

Tags

Bulletin de sécurité Google Android

2026-06-01

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions ant\u00e9rieures \u00e0 14, 15, 16, 16-qpr2 et Filet avant le correctif du 1er juin 2026",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-0075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0075"
    },
    {
      "name": "CVE-2025-47384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47384"
    },
    {
      "name": "CVE-2026-0046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0046"
    },
    {
      "name": "CVE-2026-20449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20449"
    },
    {
      "name": "CVE-2026-22167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22167"
    },
    {
      "name": "CVE-2026-0100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0100"
    },
    {
      "name": "CVE-2026-0042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0042"
    },
    {
      "name": "CVE-2026-21372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21372"
    },
    {
      "name": "CVE-2026-0087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0087"
    },
    {
      "name": "CVE-2026-21546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21546"
    },
    {
      "name": "CVE-2026-28574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28574"
    },
    {
      "name": "CVE-2026-0052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0052"
    },
    {
      "name": "CVE-2026-21378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21378"
    },
    {
      "name": "CVE-2025-71254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71254"
    },
    {
      "name": "CVE-2026-0091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0091"
    },
    {
      "name": "CVE-2025-48595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48595"
    },
    {
      "name": "CVE-2026-0088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0088"
    },
    {
      "name": "CVE-2026-21374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21374"
    },
    {
      "name": "CVE-2026-0016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0016"
    },
    {
      "name": "CVE-2026-0078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0078"
    },
    {
      "name": "CVE-2026-0048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0048"
    },
    {
      "name": "CVE-2025-59606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59606"
    },
    {
      "name": "CVE-2026-21736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21736"
    },
    {
      "name": "CVE-2026-28581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28581"
    },
    {
      "name": "CVE-2026-0044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0044"
    },
    {
      "name": "CVE-2025-47401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47401"
    },
    {
      "name": "CVE-2026-0051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0051"
    },
    {
      "name": "CVE-2026-21547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21547"
    },
    {
      "name": "CVE-2025-26418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26418"
    },
    {
      "name": "CVE-2026-21544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21544"
    },
    {
      "name": "CVE-2026-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0050"
    },
    {
      "name": "CVE-2026-0096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0096"
    },
    {
      "name": "CVE-2026-0055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0055"
    },
    {
      "name": "CVE-2026-0086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0086"
    },
    {
      "name": "CVE-2026-0061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0061"
    },
    {
      "name": "CVE-2026-0043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0043"
    },
    {
      "name": "CVE-2026-20431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20431"
    },
    {
      "name": "CVE-2026-21373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21373"
    },
    {
      "name": "CVE-2025-48570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48570"
    },
    {
      "name": "CVE-2026-20433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20433"
    },
    {
      "name": "CVE-2026-0056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0056"
    },
    {
      "name": "CVE-2026-0095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0095"
    },
    {
      "name": "CVE-2026-21541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21541"
    },
    {
      "name": "CVE-2026-20432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20432"
    },
    {
      "name": "CVE-2026-0076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0076"
    },
    {
      "name": "CVE-2025-47400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47400"
    },
    {
      "name": "CVE-2025-48600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48600"
    },
    {
      "name": "CVE-2026-0009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0009"
    },
    {
      "name": "CVE-2026-0070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0070"
    },
    {
      "name": "CVE-2026-0039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0039"
    },
    {
      "name": "CVE-2026-21542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21542"
    },
    {
      "name": "CVE-2026-28586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28586"
    },
    {
      "name": "CVE-2026-21353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21353"
    },
    {
      "name": "CVE-2026-0036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0036"
    },
    {
      "name": "CVE-2026-0069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0069"
    },
    {
      "name": "CVE-2025-48649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48649"
    },
    {
      "name": "CVE-2026-21545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21545"
    },
    {
      "name": "CVE-2026-0059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0059"
    },
    {
      "name": "CVE-2025-71255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71255"
    },
    {
      "name": "CVE-2025-64505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
    },
    {
      "name": "CVE-2026-28577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28577"
    },
    {
      "name": "CVE-2025-48648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48648"
    },
    {
      "name": "CVE-2026-0077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0077"
    },
    {
      "name": "CVE-2025-48612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48612"
    },
    {
      "name": "CVE-2026-0060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0060"
    },
    {
      "name": "CVE-2025-71256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71256"
    },
    {
      "name": "CVE-2026-21367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21367"
    },
    {
      "name": "CVE-2025-71253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71253"
    },
    {
      "name": "CVE-2026-0079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0079"
    },
    {
      "name": "CVE-2026-0099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0099"
    },
    {
      "name": "CVE-2025-64720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
    },
    {
      "name": "CVE-2026-21538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21538"
    },
    {
      "name": "CVE-2026-28580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28580"
    },
    {
      "name": "CVE-2026-28578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28578"
    },
    {
      "name": "CVE-2025-48652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48652"
    },
    {
      "name": "CVE-2026-24089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24089"
    },
    {
      "name": "CVE-2025-65018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
    },
    {
      "name": "CVE-2026-21376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21376"
    },
    {
      "name": "CVE-2026-21540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21540"
    },
    {
      "name": "CVE-2026-20455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20455"
    },
    {
      "name": "CVE-2026-20448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20448"
    },
    {
      "name": "CVE-2026-0074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0074"
    },
    {
      "name": "CVE-2025-48581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48581"
    },
    {
      "name": "CVE-2025-22426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22426"
    },
    {
      "name": "CVE-2026-21375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21375"
    },
    {
      "name": "CVE-2025-40214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40214"
    },
    {
      "name": "CVE-2026-21352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21352"
    },
    {
      "name": "CVE-2026-21543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21543"
    },
    {
      "name": "CVE-2026-0093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0093"
    },
    {
      "name": "CVE-2026-21381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21381"
    },
    {
      "name": "CVE-2025-71252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71252"
    },
    {
      "name": "CVE-2026-20435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20435"
    },
    {
      "name": "CVE-2025-32348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32348"
    },
    {
      "name": "CVE-2025-48616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48616"
    },
    {
      "name": "CVE-2025-47392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47392"
    },
    {
      "name": "CVE-2026-20447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20447"
    },
    {
      "name": "CVE-2026-25277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25277"
    },
    {
      "name": "CVE-2026-0094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0094"
    },
    {
      "name": "CVE-2026-22163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22163"
    },
    {
      "name": "CVE-2026-25276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25276"
    },
    {
      "name": "CVE-2026-0045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0045"
    },
    {
      "name": "CVE-2026-20454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20454"
    },
    {
      "name": "CVE-2026-0067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0067"
    },
    {
      "name": "CVE-2025-48615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48615"
    },
    {
      "name": "CVE-2026-21539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21539"
    },
    {
      "name": "CVE-2026-0085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0085"
    },
    {
      "name": "CVE-2026-0097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0097"
    },
    {
      "name": "CVE-2026-0089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0089"
    },
    {
      "name": "CVE-2025-71251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71251"
    },
    {
      "name": "CVE-2025-59604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59604"
    },
    {
      "name": "CVE-2025-59605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59605"
    },
    {
      "name": "CVE-2026-0018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0018"
    },
    {
      "name": "CVE-2025-47403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47403"
    },
    {
      "name": "CVE-2026-0098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0098"
    },
    {
      "name": "CVE-2026-21380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21380"
    },
    {
      "name": "CVE-2026-0080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0080"
    },
    {
      "name": "CVE-2026-20450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20450"
    },
    {
      "name": "CVE-2026-0041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0041"
    },
    {
      "name": "CVE-2026-0040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0040"
    },
    {
      "name": "CVE-2026-24085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24085"
    },
    {
      "name": "CVE-2026-20453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20453"
    },
    {
      "name": "CVE-2025-22424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22424"
    }
  ],
  "initial_release_date": "2026-06-02T00:00:00",
  "last_revision_date": "2026-06-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0679",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-48595 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": "2026-06-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
      "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=fr"
    }
  ]
}

WID-SEC-W-2026-1772

Vulnerability from csaf_certbund - Published: 2026-06-01 22:00 - Updated: 2026-06-01 22:00

Summary

Google Android: Mehrere Schwachstellen

Severity

Kritisch

Scope

122 vulnerabilities in this advisory, including CVE-2026-28574.

CVE-2026-28574

Known affected: 1 product

Open the full advisory

Find a vulnerability

Search criteria

Related vulnerabilities

BDU:2026-07754 (CVE-2026-28574)

CERTFR-2026-AVI-0679

Solutions

WID-SEC-W-2026-1772