CVE-2026-10510

A Cross-Site Scripting (XSS) vulnerability exists in the GeniexWebView component of the Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle ) on all Android versions. The root cause is the improper neutralization of input, which allows a remote attacker to execute arb...

CVE-2026-10510

Cross-Site Scripting XSS in GeniexWebView component in Transsion AI Assistant Lifestyle application com.transsion.aiassistantlifestyle all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted webactiondata URL parameter...

EUVD-2026-33874

Cross-Site Scripting XSS in GeniexWebView component in Transsion AI Assistant Lifestyle application com.transsion.aiassistantlifestyle all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted webactiondata URL parameter...

CVE-2026-10510 GeniexWebView XSS in com.transsion.aiassistantlifestyle

Cross-Site Scripting XSS in GeniexWebView component in Transsion AI Assistant Lifestyle application com.transsion.aiassistantlifestyle all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted webactiondata URL parameter...

CVE-2026-10510 GeniexWebView XSS in com.transsion.aiassistantlifestyle

Cross-Site Scripting XSS in GeniexWebView component in Transsion AI Assistant Lifestyle application com.transsion.aiassistantlifestyle all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted webactiondata URL parameter...

Don't Trust Us: A Privacy-By-Design Android Malware Detection Pipeline

Android malware detection increasingly relies on collecting and processing sensitive user data, including device identifiers, network artifacts, and runtime traces, while privacy is too often treated as a secondary concern. Existing privacy-aware approaches typically enforce privacy after data...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from incorrect handling of the Contact Picker security UI on Android, which could allow remote attackers to execute UI spoofing...

PT-2026-45682

Cross-Site Scripting XSS in GeniexWebView component in Transsion AI Assistant Lifestyle application com.transsion.aiassistantlifestyle all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web action data URL parameter...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the Cronet component in the Android version. This vulnerability could allow remote attackers to perform domai...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from insufficient execution of the PreviewTab policy in the Android version, which could allow remote attackers to bypass the...

The vulnerability of the validateNode method in the ResourceTypes.cpp script of the Framework operating system component in Android allows a hacker to escalate their privileges.

The vulnerability of the validateNode method in the ResourceTypes.cpp component of the Android operating system’s framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...

The vulnerability of the WindowState.java class in the Framework component of Android operating systems allows a hacker to increase their privileges.

The vulnerability of the WindowState.java class in the Framework component of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the `createSessionInternal` method in the `PackageInstallerService.java` class of the Android operating system’s Framework component allows a hacker to escalate their privileges.

The vulnerability of the createSessionInternal method in the PackageInstallerService.java class of the Android operating system’s framework is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow an attacker to increase their...

The vulnerability of the Letterbox.java class in the Android operating system’s Framework component allows attackers to enhance their privileges.

The vulnerability of the Letterbox.java class in the Android operating system’s framework component is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the WindowState.java class in the Framework component of Android operating systems allows a hacker to increase their privileges.

The vulnerability of the WindowState.java class in the Framework component of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s Framework component allows a hacker to increase their privileges.

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework allows a hacker to increase their privileges.

The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework component is related to incorrect code generation management. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the Framework component in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Android operating systems, related to the breach of data protection mechanisms, allows attackers to enhance their privileges.

The vulnerability of Android operating systems is related to the breach of data protection mechanisms during the pairing of Bluetooth devices. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

The vulnerability in the UBSAN throwing runtime.cpp of Android operating systems allows attackers to escalate their privileges.

The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to gain increased privileges...