By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 19 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-81386No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81388No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
28Monitor	CVE-2026-81389No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.0	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-81397No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81398No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
33Monitor	CVE-2026-81821No exploit	AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic keyaveva · pipeline integrity monitor · CWE-321 Hard-coded credentials	High8.3	—	0.1%	Sep 8, 2026
33Monitor	CVE-2026-81822No exploit	AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithmaveva · pipeline integrity monitor · CWE-327 Local privilege escalation Weak crypto	High8.3	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-81947No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81948No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81949No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-190 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81950No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-415 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81951No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
35Monitor	CVE-2026-81952No exploit	Microsoft Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
31Monitor	CVE-2026-81953No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-121 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81954No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-416 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
35Monitor	CVE-2026-81955No exploit	Windows Graphics Component Remote Code Execution Vulnerabilitymicrosoft · microsoft 365 apps for enterprise · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
31Monitor	CVE-2026-81956No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-125 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81957No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-125 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81959No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-81960No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.4%	Sep 8, 2026
63This week	CVE-2026-81963Weaponized	Windows Update Stack Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-59 Local privilege escalation	High7.8	KEV	7.1%	Sep 8, 2026
31Monitor	CVE-2026-83498No exploit	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-822 Local privilege escalation	High7.8	—	0.3%	Sep 8, 2026
32Monitor	CVE-2026-83939No exploit	Windows Secure Kernel Mode Elevation of Privilege Vulnerabilitymicrosoft · windows 11 26h1 · CWE-822 Local privilege escalation	High8.2	—	0.3%	Sep 8, 2026
28Monitor	CVE-2026-83940No exploit	Windows Device Association Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
35Monitor	CVE-2026-83941No exploit	Entra ID Elevation of Privilege Vulnerabilitymicrosoft · entra id · CWE-862 Broken access control (IDOR)	High8.8	—	0.7%	Sep 8, 2026
31Monitor	CVE-2026-83942No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-862 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.2%	Sep 8, 2026
32Monitor	CVE-2026-83948No exploit	Microsoft Azure CLI Remote Code Execution Vulnerabilitymicrosoft · vm repair · CWE-77 RCE Command injection	High8.0	—	0.5%	Sep 8, 2026
31Monitor	CVE-2026-83952No exploit	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83954No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83955No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83967No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83968No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-400 Local privilege escalation Denial of service	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83969No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83970No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83971No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83972No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83973No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83974No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83975No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83976No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83977No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83978No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83979No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83980No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83981No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83982No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83983No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83985No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83986No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83987No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-83988No exploit	Windows Biometric Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
30Monitor	CVE-2026-83989No exploit	Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.1%	Sep 8, 2026
31Monitor	CVE-2026-83990No exploit	Microsoft Graphics Component Elevation of Privilege Vulnerabilitymicrosoft · windows 11 23h2 · CWE-121 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
22Monitor	CVE-2026-83991Proof of concept	Windows Cloud Files Mini Filter Driver Tampering Vulnerabilitymicrosoft · windows 10 1809 · CWE-306 Auth bypass	Medium5.5	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-83992No exploit	Windows Imaging Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
31Monitor	CVE-2026-83995No exploit	Windows NTFS Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.3%	Sep 8, 2026
35Monitor	CVE-2026-83996No exploit	Windows Error Reporting Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High8.8	—	0.3%	Sep 8, 2026
32Monitor	CVE-2026-83997No exploit	Windows Message Queuing Remote Code Execution Vulnerabilitymicrosoft · windows 10 21h2 · CWE-416 pre-auth RCE Memory safety	High8.1	—	0.7%	Sep 8, 2026
35Monitor	CVE-2026-83998No exploit	Remote Desktop Client Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
28Monitor	CVE-2026-83999No exploit	Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-59 Local privilege escalation	High7.0	—	0.2%	Sep 8, 2026
31Monitor	CVE-2026-84000No exploit	Microsoft Graphics Component Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 RCE Memory safety	High7.8	—	0.3%	Sep 8, 2026
30Monitor	CVE-2026-84001No exploit	Windows Key Distribution Center Denial of Service Vulnerabilitymicrosoft · windows 10 1607 · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	1.1%	Sep 8, 2026
29Monitor	CVE-2026-84003No exploit	Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerabilitymicrosoft · azure\/msal-node · CWE-294 Pre-auth Auth bypass	High7.4	—	0.5%	Sep 8, 2026
28Monitor	CVE-2026-85360No exploit	Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Local privilege escalation Memory safety	High7.0	—	0.2%	Sep 8, 2026
35Monitor	CVE-2026-85877No exploit	Windows Print Spooler Remote Code Execution Vulnerabilitymicrosoft · windows 11 24h2 · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.8%	Sep 8, 2026
61This week	CVE-2026-85880Weaponized	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 Local privilege escalation Memory safety	High7.8	KEV	0.3%	Sep 8, 2026
31Monitor	CVE-2026-0065No exploit	In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-0084No exploit	In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28572No exploit	In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack.google · android · CWE-601 Local privilege escalation Open redirect	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28583No exploit	In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28590No exploit	In multiple locations, there is a possible improper encryption key validation due to a logic error in the code.google · android · CWE-347 Local privilege escalation Weak crypto	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28593No exploit	In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI.google · android · CWE-356 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28594No exploit	In multiple locations, there is a possible use after free due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28599No exploit	In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28600No exploit	In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28602No exploit	In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in google · android · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28603No exploit	In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confusedgoogle · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
30Monitor	CVE-2026-28604No exploit	In multiple locations, there is a possible use after free due to a race condition.google · android · CWE-362 RCE Race condition	High7.5	—	0.2%	Sep 8, 2026
39Monitor	CVE-2026-28606No exploit	In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code.google · android · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-28607No exploit	In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
35Monitor	CVE-2026-28609Proof of concept	In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting.google · android · CWE-704 RCE	High8.8	—	0.3%	Sep 8, 2026
31Monitor	CVE-2026-28611No exploit	In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check.google · android · CWE-862 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28612No exploit	In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
29Monitor	CVE-2026-28613No exploit	In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation.google · android · CWE-20 Local privilege escalation	High7.3	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28614No exploit	In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28616No exploit	In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
35Monitor	CVE-2026-28618Proof of concept	In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow.google · android · CWE-122 RCE Memory safety	High8.8	—	0.4%	Sep 8, 2026
31Monitor	CVE-2026-28620No exploit	In multiple locations, there is a possible unauthorized URI access due to a permissions bypass.google · android · CWE-863 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28624No exploit	In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
29Monitor	CVE-2026-28626No exploit	In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection .google · android · CWE-601 Local privilege escalation Open redirect	High7.3	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28631No exploit	In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack.google · android · CWE-601 Local privilege escalation Open redirect	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28634No exploit	In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error igoogle · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28636No exploit	In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28639No exploit	In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28642No exploit	In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28644No exploit	In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy.google · android · CWE-441 Local privilege escalation	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28650No exploit	In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
31Monitor	CVE-2026-28653No exploit	In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.google · android · CWE-787 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 8, 2026
31Monitor	CVE-2026-28655No exploit	In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 8, 2026
29Monitor	CVE-2026-28656No exploit	In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.google · android · CWE-1021 Local privilege escalation	High7.3	—	0.0%	Sep 8, 2026

CVE-2026-81386
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81388
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81389
28Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81397
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81398
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81821
33Monitor
AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key
HighCVSS 8.3No exploitEPSS 0%
- Hard-coded credentials
aveva · pipeline integrity monitorSep 8, 2026
CVE-2026-81822
33Monitor
AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
HighCVSS 8.3No exploitEPSS 0%
- Local privilege escalation
- Weak crypto
aveva · pipeline integrity monitorSep 8, 2026
CVE-2026-81947
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81948
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81949
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81950
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81951
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81952
35Monitor
Microsoft Word Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81953
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81954
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81955
35Monitor
Windows Graphics Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · microsoft 365 apps for enterpriseSep 8, 2026
CVE-2026-81956
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81957
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81959
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81960
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 8, 2026
CVE-2026-81963
63This week
Windows Update Stack Elevation of Privilege Vulnerability
HighCVSS 7.8KEVWeaponizedEPSS 7%
- Local privilege escalation
microsoft · windows 11 23h2Sep 8, 2026
CVE-2026-83498
31Monitor
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 11 23h2Sep 8, 2026
CVE-2026-83939
32Monitor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 11 26h1Sep 8, 2026
CVE-2026-83940
28Monitor
Windows Device Association Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83941
35Monitor
Entra ID Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · entra idSep 8, 2026
CVE-2026-83942
31Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
microsoft · windows 10 1809Sep 8, 2026
CVE-2026-83948
32Monitor
Microsoft Azure CLI Remote Code Execution Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Command injection
microsoft · vm repairSep 8, 2026
CVE-2026-83952
31Monitor
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 24h2Sep 8, 2026
CVE-2026-83954
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83955
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83967
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83968
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Denial of service
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83969
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83970
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83971
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83972
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83973
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83974
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83975
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83976
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83977
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83978
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83979
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83980
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83981
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83982
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83983
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83985
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83986
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83987
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83988
31Monitor
Windows Biometric Service Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83989
30Monitor
Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83990
31Monitor
Microsoft Graphics Component Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 23h2Sep 8, 2026
CVE-2026-83991
22Monitor
Windows Cloud Files Mini Filter Driver Tampering Vulnerability
MediumCVSS 5.5Proof of conceptEPSS 0%
- Auth bypass
microsoft · windows 10 1809Sep 8, 2026
CVE-2026-83992
35Monitor
Windows Imaging Component Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83995
31Monitor
Windows NTFS Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83996
35Monitor
Windows Error Reporting Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83997
32Monitor
Windows Message Queuing Remote Code Execution Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 21h2Sep 8, 2026
CVE-2026-83998
35Monitor
Remote Desktop Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-83999
28Monitor
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 11 24h2Sep 8, 2026
CVE-2026-84000
31Monitor
Microsoft Graphics Component Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-84001
30Monitor
Windows Key Distribution Center Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-84003
29Monitor
Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · azure\/msal-nodeSep 8, 2026
CVE-2026-85360
28Monitor
Windows Kernel Elevation of Privilege Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-85877
35Monitor
Windows Print Spooler Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
microsoft · windows 11 24h2Sep 8, 2026
CVE-2026-85880
61This week
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
HighCVSS 7.8KEVWeaponizedEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1607Sep 8, 2026
CVE-2026-0065
31Monitor
In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-0084
31Monitor
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28572
31Monitor
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Open redirect
google · androidSep 8, 2026
CVE-2026-28583
31Monitor
In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28590
31Monitor
In multiple locations, there is a possible improper encryption key validation due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Weak crypto
google · androidSep 8, 2026
CVE-2026-28593
31Monitor
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28594
31Monitor
In multiple locations, there is a possible use after free due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28599
31Monitor
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28600
31Monitor
In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28602
31Monitor
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
google · androidSep 8, 2026
CVE-2026-28603
31Monitor
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28604
30Monitor
In multiple locations, there is a possible use after free due to a race condition.
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Race condition
google · androidSep 8, 2026
CVE-2026-28606
39Monitor
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
google · androidSep 8, 2026
CVE-2026-28607
31Monitor
In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28609
35Monitor
In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting.
HighCVSS 8.8Proof of conceptEPSS 0%
- RCE
google · androidSep 8, 2026
CVE-2026-28611
31Monitor
In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
google · androidSep 8, 2026
CVE-2026-28612
31Monitor
In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28613
29Monitor
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28614
31Monitor
In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28616
31Monitor
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28618
35Monitor
In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow.
HighCVSS 8.8Proof of conceptEPSS 0%
- RCE
- Memory safety
google · androidSep 8, 2026
CVE-2026-28620
31Monitor
In multiple locations, there is a possible unauthorized URI access due to a permissions bypass.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
google · androidSep 8, 2026
CVE-2026-28624
31Monitor
In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28626
29Monitor
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection .
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Open redirect
google · androidSep 8, 2026
CVE-2026-28631
31Monitor
In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Open redirect
google · androidSep 8, 2026
CVE-2026-28634
31Monitor
In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error i
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28636
31Monitor
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28639
31Monitor
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28642
31Monitor
In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28644
31Monitor
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28650
31Monitor
In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28653
31Monitor
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 8, 2026
CVE-2026-28655
31Monitor
In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026
CVE-2026-28656
29Monitor
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
google · androidSep 8, 2026