The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-57010: Google Android: In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the…N/AN/AN/ANov 10, 2026
CVE-2026-57009: Google Android: In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-57005: Google Android: In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputyN/AN/AN/ANov 10, 2026
CVE-2026-57004: Google Android: In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56995: Google Android: In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory…N/AN/AN/ANov 10, 2026
CVE-2026-56980: Google Android: In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared…N/AN/AN/ANov 10, 2026
CVE-2026-56971: Google Android: In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56969: Google Android: In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the codeN/AN/AN/ANov 10, 2026
CVE-2026-56966: Google Android: In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access…N/AN/AN/ANov 10, 2026
CVE-2026-56956: Google Android: In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the…N/AN/AN/ANov 10, 2026
CVE-2026-56951: Google Android: In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak…N/AN/AN/ANov 10, 2026
CVE-2026-56949: Google Android: In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-56947: Google Android: In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused…N/AN/AN/ANov 10, 2026
CVE-2026-56946: Google Android: In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page…N/AN/AN/ANov 10, 2026
CVE-2026-56944: Google Android: In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there…N/AN/AN/ANov 10, 2026
CVE-2026-56943: Google Android: In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle…N/AN/AN/ANov 10, 2026
CVE-2026-56938: Google Android: In port_shutdown of ipc.c, there is a possible Use After Free due to a race conditionN/AN/AN/ANov 10, 2026
CVE-2026-56935: Google Android: In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic errorN/AN/AN/ANov 10, 2026
CVE-2026-56934: Google Android: In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic…N/AN/AN/ANov 10, 2026
CVE-2026-56933: Google Android: In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflowN/AN/AN/ANov 10, 2026
CVE-2026-56930: Google Android: In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream…N/AN/AN/ANov 10, 2026
CVE-2026-56929: Google Android: In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56926: Google Android: In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and…N/AN/AN/ANov 10, 2026
CVE-2026-56919: Google Android: In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a…N/AN/AN/ANov 10, 2026
CVE-2026-56916: Google Android: In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a…N/AN/AN/ANov 10, 2026
651-675 of 511254