Lucene search
+L

50743 matches found

Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.10 views

PT-2025-43453

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Exploitation may allow a remote attacker to elevate privileges...

7.5CVSS6.1AI score0.00085EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.14 views

PT-2025-43482

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component where insufficient input validation can be exploited to trick a user into accepting a permission through a tapjacking or overlay attack. This...

7.8CVSS6.3AI score0.00079EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.16 views

PT-2025-43460

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description There is a potential bypass of user profile boundaries through improperly validated forwarded intents. This could allow for local privilege escalation without requiring additional execution privileges or user...

7.8CVSS6.4AI score0.00102EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.16 views

PT-2025-43474

In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00094EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.10 views

PT-2025-43502

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the VoiceInteractionManagerService.java component, specifically within the findAvailRecognizer function. This issue stems from an insecure default value, potentially allowing...

7.8CVSS6.3AI score0.0008EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.13 views

PT-2025-43470

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient protection of system data. Remote attackers may be able to escalate privileges by exploiting this...

7.8CVSS6.5AI score0.00124EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.14 views

PT-2025-43467

Name of the Vulnerable Software and Affected Versions KeyguardViewMediator.java affected versions not specified Description A race condition exists in multiple functions within KeyguardViewMediator.java, potentially allowing a lockscreen bypass. Successful exploitation could lead to local privile...

7.4CVSS6.1AI score0.00076EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.15 views

PT-2025-43451

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Successful exploitation may allow a remote attacker to elevate...

7.8CVSS6.6AI score0.00079EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.6 views

PT-2025-43468

Name of the Vulnerable Software and Affected Versions MediaProvider.java affected versions not specified Description A flaw exists in multiple functions within MediaProvider.java that may allow bypassing the WRITE EXTERNAL STORAGE permission due to a missing permission check. Successful...

7.8CVSS6.1AI score0.00099EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.12 views

PT-2025-43493

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. Exploitation of this issue may allow an attacker to escalate privileges...

7.8CVSS6.5AI score0.00106EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.5 views

PT-2025-43471

Name of the Vulnerable Software and Affected Versions affected versions not specified Description There is a potential for media deletion without the necessary MANAGE EXTERNAL STORAGE permission due to an intent redirect. This could result in local escalation of privilege and does not require use...

8.4CVSS5.9AI score0.00108EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.17 views

PT-2025-43479

In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

1.7CVSS6.5AI score0.0034EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.14 views

PT-2025-43480

In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...

6.8CVSS6.9AI score0.00089EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.12 views

PT-2025-43472

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Remote attackers may be able to escalate privileges. Multiple functio...

7.8CVSS7.3AI score0.00093EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.17 views

PT-2025-43463

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. This issue may allow a remote attacker to elevate privileges. The iss...

7.8CVSS6.3AI score0.00086EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.10 views

PT-2025-43507

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00094EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.18 views

PT-2025-43452

Name of the Vulnerable Software and Affected Versions versions prior to 2025-22432 Description A persistent connection may occur due to improper input validation within the notifyTimeout function of the CallRedirectionProcessor.java component. This could potentially allow for local escalation of...

6.7CVSS6.7AI score0.00093EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.9 views

PT-2025-43465

Name of the Vulnerable Software and Affected Versions CertInstaller.java affected versions not specified Description The software contains a flaw in multiple functions that may allow for the installation of certificates due to a permissions bypass. This could result in local escalation of privile...

7.8CVSS6.7AI score0.00067EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.6 views

PT-2025-43498

In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.8CVSS6.8AI score0.00135EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.14 views

PT-2025-43459

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Android Framework component related to insufficient protection of system data. Successful exploitation may allow a remote attacker to elevate privileges. The issue involv...

7.8CVSS7AI score0.00102EPSS
SaveExploits0References12
Rows per page
Query Builder