Android Security News

Security news specific to Android: vulnerabilities, malicious apps and patches affecting the Android ecosystem.

Android's open ecosystem and device fragmentation make it a persistent target, both for platform-level exploits and for malicious apps distributed through official and third-party stores. Android CVEs, malware campaigns targeting the platform, and Google's monthly security bulletins land here. Patch delivery across manufacturers is fragmented, so many devices stay exposed long after a fix ships.

Recent Android items

New ArcticRAT Malware Uses Fake VPN Connections to Evade Google Play Protect During Installation https://gbhackers.com/arcticrat-malware-attack/
@PentestingNews · Nov 13, 2026
CVE-2026-127209 Xiaomi Mi Browser Android Application (com.mi.globalbrowser) before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExter...
@cveNotify · Nov 12, 2026
CVE-2026-95405 In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local e...
@cveNotify · Nov 12, 2026
CVE-2026-59637 In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with execution privileges neede...
@cveNotify · Nov 12, 2026
CVE-2026-59636 In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature anti-rollback fuse updates due to a logic error. T...
@cveNotify · Nov 12, 2026
CVE-2026-59628 In s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds read in the video decoder command queue due to a logic error. This could lead to local in...
@cveNotify · Nov 12, 2026
CVE-2026-124038 An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or im...
@cveNotify · Nov 12, 2026
CVE-2026-126861 Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...
@cveNotify · Nov 12, 2026
CVE-2026-126915 Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute ar...
@cveNotify · Nov 12, 2026
Mumbai Court Grants Bail To Indore Developer Accused Of Creating 2,805 Malicious APK Files In ₹150-Crore Cyber Fraud Case https://ift.tt/3Ij9sc1
@ctinow · Nov 12, 2026
CVE-2026-126915 Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute ar...
@cveNotify · Nov 11, 2026
Chrome Fixes Exploited XML Flaw: Relaunch to Apply the Update Google has released a Chrome update for an XML flaw that already has an exploit in the wild. The fix is in the November 9 desktop release,...
@topcybersecurity · Nov 11, 2026
CVE-2026-58696 In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. U...
@cveNotify · Nov 11, 2026
CVE-2026-95404 In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to local esca...
@cveNotify · Nov 11, 2026
CVE-2026-59623 In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incorrect bounds check. This could lead to remote...
@cveNotify · Nov 11, 2026
CVE-2026-59613 In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validation. This could lead to remote denial of ser...
@cveNotify · Nov 11, 2026
CVE-2026-59611 In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input validation. This could lead to remote denial o...
@cveNotify · Nov 11, 2026
CVE-2026-59603 In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retry handling due to a use after free. This cou...
@cveNotify · Nov 11, 2026
CVE-2026-59595 In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resource exhaustion. This could lead to remote deni...
@cveNotify · Nov 11, 2026
CVE-2026-59582 In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of servi...
@cveNotify · Nov 11, 2026
CVE-2026-58809 In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges...
@cveNotify · Nov 11, 2026
CVE-2026-58807 In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects due to a logic error. This could lead to remote...
@cveNotify · Nov 11, 2026
CVE-2026-95405 In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an incorrect bounds check. This could lead to local e...
@cveNotify · Nov 10, 2026
CVE-2026-95404 In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to local esca...
@cveNotify · Nov 10, 2026
CVE-2026-95403 In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing bounds check. This could lead to local escalation...
@cveNotify · Nov 10, 2026
CVE-2026-95402 In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privileges needed...
@cveNotify · Nov 10, 2026
CVE-2026-95400 In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect bounds check. This could lead to local escalation...
@cveNotify · Nov 10, 2026
CVE-2026-95399 In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a race condition. This could lead to local escalatio...
@cveNotify · Nov 10, 2026
CVE-2026-95397 In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalation of privilege with execution privi...
@cveNotify · Nov 10, 2026
CVE-2026-59637 In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code. This could lead to local information disclosure with execution privileges neede...
@cveNotify · Nov 10, 2026

Other topics

CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds: new IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches: what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.