Lucene search
K

57 matches found

NVD
NVD
added 2026/03/16 2:18 p.m.0 views

CVE-2026-20990

Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege...

8.4CVSS0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

SAMSUNG Settings 安全漏洞

SAMSUNG Settings is a setting service provided by Samsung Electronics of South Korea. Versions of SAMSUNG Settings prior to SMR Mar-2026 Release 1 contained security vulnerabilities. These vulnerabilities stemmed from improper intent verification by the broadcast receiver, which could allow local...

6.8CVSS5.9AI score0.00018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.2 views

PT-2026-25595

Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege...

8.4CVSS5.9AI score0.00036EPSS
Exploits0References1
OSV
OSV
added 2026/03/02 7:16 p.m.1 views

CVE-2024-31328

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed...

8.8CVSS6AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 7:2 p.m.2 views

CVE-2024-31328

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed...

8.8CVSS6.2AI score0.00066EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/02 7:2 p.m.1 views

CVE-2024-31328

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed...

6.2AI score0.00066EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/02 7:2 p.m.27 views

CVE-2024-31328

In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed...

0.00066EPSS
Exploits0References1
OSV
OSV
added 2026/02/04 7:15 a.m.0 views

CVE-2026-20979

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...

7.8CVSS5.9AI score0.00007EPSS
Exploits0References1
CVE
CVE
added 2026/02/04 6:14 a.m.7 views

CVE-2026-20983

Samsung Dialer (Android) is affected by CVE-2026-20983 due to improper export of Android application components, enabling a local attacker to launch arbitrary activities with Samsung Dialer privileges. Affected software is Samsung Dialer prior to SMR Feb-2026 Release 1. The vulnerability is local...

8.4CVSS5.5AI score0.00007EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/04 6:14 a.m.2 views

CVE-2026-20983

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege...

8.4CVSS5.5AI score0.00007EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/04 6:14 a.m.1 views

CVE-2026-20979

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...

8.4CVSS5.5AI score0.00007EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.2 views

SAMSUNG Dialer 安全漏洞

Samsung Dialer is a dialer application developed by South Korea’s Samsung Corporation. Versions of the Samsung Dialer prior to SMR Feb-2026 Release 1 contained security vulnerabilities. These vulnerabilities stemmed from improper export of Android application components, potentially allowing loca...

8.4CVSS5.9AI score0.00007EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.3 views

PT-2026-6093

Name of the Vulnerable Software and Affected Versions Samsung Dialer versions prior to SMR Feb-2026 Release 1 Description A flaw exists due to the improper export of Android application components in Samsung Dialer. This allows a local attacker to launch arbitrary activity with Samsung Dialer...

8.4CVSS5.6AI score0.00007EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.3 views

SAMSUNG Members 安全漏洞

Samsung Members is a community platform app developed by South Korea’s Samsung Corporation. Versions of Samsung Members prior to 5.6.00.11 contained security vulnerabilities. These vulnerabilities stemmed from improper input validation, potentially allowing remote attackers to connect to arbitrar...

7CVSS6.1AI score0.00026EPSS
Exploits0References2
OSV
OSV
added 2025/12/02 2:15 a.m.0 views

CVE-2025-58487

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

3.3CVSS5.9AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-25810

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/04 10:32 p.m.1 views

CVE-2025-22437

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7AI score0.00091EPSS
Exploits0References1
CVE
CVE
added 2025/09/02 10:11 p.m.427 views

CVE-2025-22437

CVE-2025-22437 is tied to a logic error in Android’s setMediaButtonReceiver across multiple files, enabling a background process to launch arbitrary activities and cause local privilege escalation without extra execution privileges or user interaction. The vulnerability is categorized as Elevatio...

7.8CVSS6.5AI score0.00091EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/09/02 10:11 p.m.1 views

CVE-2025-22437

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00091EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.2 views

PT-2025-35634

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A logic error in the code within setMediaButtonReceiver of multiple files may allow launching arbitrary activities from the background. This could lead to loc...

7.8CVSS6.7AI score0.00091EPSS
Exploits0References6
Rows per page
Query Builder