Lucene search
+L

35 matches found

NVD
NVD
•added 2026/09/08 7:17 p.m.•13 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00089EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 6:05 p.m.•11 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 6:05 p.m.•40 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00089EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 6:05 p.m.•15 views

EUVD-2026-73992

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00089EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 6:05 p.m.•30 views

CVE-2026-28663

A vulnerability exists in LauncherAppsService.java within the buildIntentSenderForUser function of the Android Framework . This issue is caused by a BAL Bypass , which allows an attacker to launch an activity from the background. Exploitation can lead to local escalation of privilege without requ...

7.8CVSS5.9AI score0.00089EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-28663: Incorrect Authorization

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00089EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88230

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00089EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/01 12:00 a.m.•10 views

ASB-A-492867206

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00089EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-15837

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00118EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/04 6:15 p.m.•16 views

CVE-2025-26436

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS0.00089EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•0 views

CVE-2025-26436: Incorrect Authorization

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.3AI score0.00089EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:34 a.m.•19 views

CVE-2024-0034

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.2AI score0.00118EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/01 12:00 a.m.•32 views

ASB-A-322159724

In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.3AI score0.00089EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/01 12:00 a.m.•30 views

ASB-A-305695605

In multiple locations, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.3AI score
SaveExploits0References4
NVD
NVD
•added 2024/02/16 2:15 a.m.•31 views

CVE-2024-0034

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00118EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/16 2:15 a.m.•25 views

Privilege escalation

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.7AI score0.00118EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/16 12:08 a.m.•43 views

CVE-2024-0034

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1AI score0.00118EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/16 12:08 a.m.•4053 views

CVE-2024-0034

Technical details beyond the BAL Bypass description are not publicly provided in the supplied documents. Monitor Android security advisories and vendor advisories for affected products, versions, and fixes.

7.8CVSS7.1AI score0.00118EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/16 12:08 a.m.•26 views

CVE-2024-0034

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score0.00118EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/16 12:00 a.m.•1 views

CVE-2024-0034: Incorrect Default Permissions

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00118EPSS
SaveExploits0References2
Rows per page
Query Builder