Lucene search
+L

97392 matches found

Circl
Circl
•added 2026/06/21 6:00 p.m.•23 views

CVE-2025-48617

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931 2026-08-28 18:00:05+00:00| seen|...

7.8CVSS7.3AI score0.00077EPSS
SaveExploits0References3
Circl
Circl
•added 2026/06/21 6:00 p.m.•22 views

CVE-2026-0057

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931...

3.3CVSS5.8AI score0.00065EPSS
SaveExploits0References2
Circl
Circl
•added 2026/06/21 6:00 p.m.•23 views

CVE-2025-48643

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931...

7.8CVSS5.8AI score0.00084EPSS
SaveExploits0References2
Circl
Circl
•added 2026/06/21 6:00 p.m.•22 views

CVE-2026-0019

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931...

7.8CVSS5.8AI score0.00088EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/19 3:16 p.m.•43 views

CVE-2026-21768

The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...

6.3CVSS0.00157EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/19 2:50 p.m.•16 views

CVE-2026-21768

The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...

6.3CVSS5.8AI score0.00157EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/19 2:50 p.m.•59 views

CVE-2026-21768 HCL Verse for Android is susceptible to an injection vulnerability

The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...

6.3CVSS0.00157EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/19 2:50 p.m.•60 views

CVE-2026-21768

CVE-2026-21768 affects the compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android. The vulnerability arises from improper validation of HTML input in the rich text editor, enabling execution of malicious content in certain scenarios. According to NVD, CVSSv3.1 base score is 6.3 (...

6.3CVSS5.8AI score0.00157EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/19 2:50 p.m.•13 views

CVE-2026-21768 HCL Verse for Android is susceptible to an injection vulnerability

The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...

6.3CVSS5.8AI score0.00157EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/19 2:50 p.m.•29 views

EUVD-2026-38035

The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...

6.3CVSS5.8AI score0.00157EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/19 9:01 a.m.•22 views

CVE-2026-12469

A flaw was found in the GPU component of Google Chrome on Android. This uninitialized use vulnerability could be exploited by a remote attacker. By enticing a user to visit a specially crafted HTML page, an attacker could cause the leakage of sensitive cross-origin data...

6.5CVSS5.7AI score0.00186EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2026/06/19 12:00 a.m.•104 views

A Longitudinal Study of Android Apps Signing Key Protection

Android app signing relies on developer-managed credentials, making secure key protection essential for the integrity of the software supply chain. A recent platform key leakage incident involving two major OEM manufacturers demonstrates that even robustly designed signing mechanisms can be...

5.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2026/06/19 12:00 a.m.•99 views

📄 Android Kernel /dev/umts_ipc0 Out-Of-Bounds Read / Write

Proof of concept exploit targeting a vulnerability in an Android kernel driver related to GNSS/UMTS IPC /dev/umtsipc0. ================================================================================================================================== | Title : Android Kernel Exploit OOB Read/Write...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•53 views

PT-2026-50924

Name of the Vulnerable Software and Affected Versions compose-rich-editor version 1.0.0-rc14 Description The compose-rich-editor library, used in HCL Verse for Android for rich text email composition, fails to properly validate HTML input. This lack of validation allows malicious content to be...

6.3CVSS5.8AI score0.00157EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/19 12:00 a.m.•7 views

CVE-2026-21768: Improper Input Validation

The compose-rich-editor library v1.0.0-rc14 used in HCL Verse for Android's rich text email composition fails to properly validate all HTML input thereby allowing malicious content to be executed in certain situations...

6.3CVSS5.7AI score0.00157EPSS
SaveExploits0References3
Krebs on Security
Krebs on Security
•added 2026/06/18 5:37 p.m.•42 views

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botn...

5.2AI score
SaveExploits0
CVE
CVE
•added 2026/06/18 6:29 a.m.•83 views

CVE-2026-28573

CVE-2026-28573 affects Android Wear OS via a Framework component vulnerability described as a local denial of service in AndroidManifest.xml due to a missing permission check. The CVE is characterized as high severity with a CVSSv4 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:I:H/CI:H/AI:H; impacts ...

10CVSS5.9AI score0.00175EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/18 6:29 a.m.•49 views

CVE-2026-28573

In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/18 6:29 a.m.•32 views

EUVD-2026-37857

In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS5.5AI score0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/18 6:29 a.m.•31 views

CVE-2026-28573

In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS5.9AI score0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder