Multiples vulnérabilités dans Google Android (10 septembre 2026)

Details

Source

CERT-FR Avis de sécurité (FR · national-cert · site)

Severity

unknown

Published

2026-09-10

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1158/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-215520.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-451980.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-240900.06% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-286640.08% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-499180.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-00010.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-286270.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-286180.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-205020.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.

Referenced CVEs

+12 more CVEs referenced in this advisory.

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• unknownUSN-8748-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu
• high[UPDATE] [hoch] Linux Kernel: Mehrere Schwachstellencert-bund
• high[NEU] [hoch] Android Patchday September 2026: Mehrere Schwachstellencert-bund
• unknownAndroid Multiple Vulnerabilitieshkcert
• highCVE-2026-58846: In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission…nvd
• highCVE-2026-58820: In multiple locations, there is a possible memory safety issue due to integer overflow. This c…nvd
• highCVE-2026-55294: In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a…nvd
• highCVE-2026-49932: In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer o…nvd
• highCVE-2026-49918: In multiple functions, there is a possible out of bounds write due to an integer overflow. Thi…nvd
• lowCVE-2026-49895: In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds r…nvd
• lowCVE-2026-45519: In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unautho…nvd
• highCVE-2026-28668: In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error i…nvd

More from CERT-FR Avis de sécurité

• unknownMultiples vulnérabilités dans MongoDB Server (10 septembre 2026)2026-09-10
• unknownMultiples vulnérabilités dans les produits Palo Alto Networks (10 septembre 2026)2026-09-10
• unknownVulnérabilité dans Apereo CAS (10 septembre 2026)2026-09-10
• unknownMultiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager (10 septembre 2026)2026-09-10
• unknownMultiples vulnérabilités dans Moodle (10 septembre 2026)2026-09-10