CVE-2025-26450

In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the default IME due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

CVE-2025-26450

creationtimestamp| type| source ---|---|--- 2025-09-04 17:26:06+00:00| seen| Telegram/Mnmg0Q7-YBYrNpfcny9B6KyKifoBE6HVymaPrHa3Fhgghm4...

CVE-2023-26450

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker...

CVE-2022-26450

In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07177801; Issue ID: ALPS07177801...

CVE-2024-26450

creationtimestamp| type| source ---|---|--- 2024-02-28 23:27:07+00:00| seen| https://t.me/ctinow/195976...

CVE-2024-26450

The photo gallery software Piwigo is vulnerable in versions prior to v.14.2.0 , allowing a malicious user to take over the application. The root cause involves chaining a Cross Site Request Forgery (CSRF) vulnerability to inject a Stored Cross Site Scripting (XSS) payload into an administrator's ...

CVE-2023-26450

creationtimestamp| type| source ---|---|--- 2023-08-02 16:39:15+00:00| seen| https://t.me/cibsecurity/67577...

CVE-2023-26450

Open-Xchange CVE-2023-26450 affects the OX Count web service in Open-Xchange AppSuite. The root cause is that the OX Count service did not specify a media-type when processing responses from external resources, enabling malicious script code to execute in the victim’s context and potentially lead...

CVE-2022-26450

creationtimestamp| type| source ---|---|--- 2022-09-06 22:19:29+00:00| seen| https://t.me/cibsecurity/49355...

CVE-2022-26450

CVE-2022-26450 affects MediaTek Apusys. The vulnerability is a use-after-free caused by a race condition in apusys that can lead to local escalation of privileges with System execution privileges required; exploitation does not require user interaction. The issue is documented across multiple sou...