CVE-2026-64746

An authorization issue in the Contacts component of various Apple operating systems allows a malicious application to add contacts without user authorization . This vulnerability was addressed through improved validation . The issue is fixed in iOS 18.7.10 , iPadOS 18.7.10 , iOS 26.6 , iPadOS 26....

PT-2026-65278

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to insufficient validation, which may allo...

CVE-2025-48523

In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48523

A logic error in the onCreate function of the SelectAccountActivity.java module in Google Android allows for an unauthorized way of adding contacts without permission. This vulnerability can lead to a local escalation of privilege and potentially allow an attacker to execute arbitrary code. No us...

PT-2025-36050

Name of the Vulnerable Software and Affected Versions: SelectAccountActivity.java affected versions not specified Description: A logic error in the onCreate function of SelectAccountActivity.java may allow adding contacts without the necessary permissions. This could lead to local privilege...