CVE-2026-4250: Plaintext Storage of a Password

A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android. Affected is an unknown function of the file resources/assets/service-account.json of the component Google Cloud Service Account Key Handler. Performing a manipulation results in unprotected...

CVE-2026-4217: Plaintext Storage of a Password

A security vulnerability has been detected in XREAL Nebula App up to 3.2.1 on Android. This impacts an unknown function of the file in ai/nreal/nebula/flutterPlugin/CloudStoragePlugin.java of the component ai.nreal.nebula.universal. Such manipulation of the argument...

PT-2026-25595

Name of the Vulnerable Software and Affected Versions Samsung Secure Folder versions prior to SMR Mar-2026 Release 1 Description A flaw exists due to the improper export of Android application components within Secure Folder. This allows local attackers to launch arbitrary activity with Secure...

Linux X86 Driver Heap Buffer Overflow DoS

The vulnerability of the chuwihi8init function in the drivers/platform/x86/x86-android-tablets.c driver for X86 devices in the Linux operating system is related to incorrect initialization of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-25752

A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of the file file app/babychakra/babychakra/Configuration.java of the component app.babychakra.babychakra. Performing a manipulation of the argument SEGMENT WRITE...

PT-2026-25614

Name of the Vulnerable Software and Affected Versions XREAL Nebula App versions through 3.2.1 Description A security issue has been identified in XREAL Nebula App on Android. The issue affects an unknown function within the ai/nreal/nebula/flutterPlugin/CloudStoragePlugin.java file of the...

CVE-2026-4216: Use of Hard-coded Credentials

A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard-coded credentials. The attack can only be executed locally. The exploit has been made available to the public and cou...

PT-2026-25771

A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. Affected by this vulnerability is an unknown functionality of the file resources/assets/flutter assets/assets/credentials.json of the component ai.citydata.citychat. Executing a manipulation can lead to unprotected stora...

CVE-2026-0385

Microsoft Edge Chromium-based for Android Spoofing Vulnerability...

CVE-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-0385

CVE-2026-0385 affects Microsoft Edge (Chromium-based) for Android and is described as a spoofing vulnerability. According to the metrics, it requires network access and user interaction, with a Medium base score (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) and a vulnerability impact on confide...

CVE-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

Minor update(8) for Vivaldi Android Browser 7.8

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the seventh 7.8 minor update: Upgraded to...

FoSAM: Forward Secret Messaging in Ad-Hoc Networks

Apps such as Firechat and Bridgefy have been used during recent protests in Hong Kong and Iran, as they allow communication over ad-hoc wireless networks even when internet access is restricted. However, these apps do not provide sufficient protection as they do not achieve forward secrecy in...

Microsoft Edge security vulnerabilities

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to perform spoofing attacks...

PT-2026-25403

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based for Android affected versions not specified Description A spoofing issue exists in Microsoft Edge Chromium-based for Android. This allows for potential phishing campaigns, particularly on mobile devices, and...

CVE-2026-0385: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based for Android Spoofing Vulnerability...

KLA90935 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in Web Speech can be exploited to...

CVE-2026-32251

Tolgee is an open-source localization platform. Prior to 3.166.3, the XML parsers used for importing Android XML resources .xml and .resx files don't disable external entity processing. An authenticated user who can import translation files into a project can exploit this to read arbitrary files...