Discovered CVEs

• CVE-2026-0081: Android NFC event spoofing vulnerability

  A missing permission check in Android NFC could allow spoofing an NFC event, leading to local escalation of privilege. No additional execution privileges or user interaction are required.

  Android System / NFC. Android severity: High. CVSS v4.0: 10.0. CWE-862: Missing Authorization. Published on June 17, 2026. Android reference: A-449367527.

  [NVD] [Android Security Release Notes] [Android Security Acknowledgements] [CVE Record]