Lucene search
+L

77214 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:43 p.m.13 views

CVE-2026-8951

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the Toolbar component in Firefox for Android...

6.5CVSS5.8AI score0.00252EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/05 7:43 p.m.14 views

CVE-2026-8945

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in Firefox and Firefox Focus for Android...

7.5CVSS5.8AI score0.00369EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/05 7:38 p.m.15 views

CVE-2026-21020

Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions...

7.8CVSS5.4AI score0.00094EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:37 p.m.14 views

CVE-2026-3291

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities...

6.9CVSS5.5AI score0.00096EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:37 p.m.19 views

CVE-2026-47782

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor...

4.6CVSS5.2AI score0.00132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:37 p.m.21 views

CVE-2026-29051

melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, melange lint --persist-lint-results opt-in flag, also usable via melange build --persist-lint-results constructs output file paths by joining --out-dir with the arch and...

4.4CVSS5.7AI score0.00172EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:36 p.m.17 views

CVE-2026-41281

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information CWE-319 vulnerability. A man-in-the-middle attacker may access and modify communications transmitted in plaintext, potentially resulting in information disclosure or data tampering...

6.3CVSS5.5AI score0.00092EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:32 p.m.21 views

CVE-2026-45153

Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0...

4.6CVSS5.3AI score0.00153EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:30 p.m.11 views

CVE-2026-42184

Tauri is a framework for building binaries for all major desktop platforms. From 2.0 to 2.11.0, a flaw in Tauri's islocalurl function causes it to incorrectly classify remote URLs as trusted local origins on Windows and Android. On these systems, Tauri maps custom URI scheme protocols to...

8.8CVSS5.6AI score0.00312EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:25 p.m.16 views

CVE-2026-0248

An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle MitM attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can...

8.6CVSS5.5AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:24 p.m.11 views

CVE-2026-44279

A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to improper access control via...

5.5CVSS5.5AI score0.00097EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:19 p.m.16 views

CVE-2026-5777

This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge ADB service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading...

8.7CVSS5.5AI score0.00261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:19 p.m.14 views

CVE-2026-49185

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec, allowing command/instruction injection...

10CVSS5.4AI score0.00387EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:19 p.m.12 views

CVE-2026-49187

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse...

8.7CVSS5.4AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.14 views

CVE-2026-33362

In Meari IoT SDK builds embedded in CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and white-label Android apps = 1.8.x latest observed, multiple security-critical secrets are hardcoded and shared, including API signing material, password-transport keying, and service access keys...

8.6CVSS5.5AI score0.00241EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.12 views

CVE-2026-0072

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS5.6AI score0.00122EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.20 views

CVE-2026-44698

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.4.1 for iOS and 2026.4.4 for Android, he Home Assistant Companion apps for Android and iOS expose a JavaScript bridge to the in-app WebView window.externalApp on Android and...

8.3CVSS5.8AI score0.00136EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/06/05 2:53 p.m.35 views

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin , according to findings from ESET. The Slovakian cybersecurity company said it first detected the malware spread via multiple campaigns in early 2025, with each attack wave making use of distinct websites...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/06/05 11:16 a.m.25 views

CVE-2026-21034

Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration...

4.8CVSS0.00084EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/05 11:16 a.m.22 views

CVE-2026-21029

Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations...

7.8CVSS0.00093EPSS
SaveExploits0References1
Rows per page
Query Builder