Skip to content
Threat Feed
Subscribe

Tag

Mobile-Security

3 briefs RSS
high advisory

Qualcomm Adreno GPU Privilege Escalation (CVE-2025-21479)

CVE-2025-21479 is a high-severity local privilege escalation vulnerability in the Qualcomm Adreno GPU driver allowing for kernel-level arbitrary physical memory writes, with functional exploits now targeting Android devices including the iQOO Neo9.

iQOO Neo9 +1 privilege-escalation android vulnerability mobile-security
2t 1c
high threat

Active Exploitation of Google Pixel Improper Authorization Vulnerability

CISA has added CVE-2026-58704, an improper authorization vulnerability in Google Pixel devices, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation.

exploited Pixel vulnerability cisa-kev mobile-security
1c
high advisory

Universal XSS in UC Browser for Android via ucapi Bridge

A Universal Cross-Site Scripting (UXSS) vulnerability, CVE-2026-78997, allows attackers to bypass the Same-Origin Policy in UC Browser for Android by exploiting a flaw in the ucapi login callback mechanism.

UC Browser uxss web-vulnerability mobile-security
1t 1c