Lucene search
+L

268 matches found

Kitploit
Kitploit
added 2026/09/14 2:25 a.m.4 views

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

8.8CVSS7.7AI score0.02782EPSS
SaveExploits0
NVD
NVD
added 2026/09/08 7:17 p.m.7 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00076EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:17 p.m.6 views

CVE-2026-28655

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00082EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:17 p.m.6 views

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00071EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:17 p.m.7 views

CVE-2026-0084

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00077EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:05 p.m.7 views

EUVD-2026-73992

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00076EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 6:05 p.m.29 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00076EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 6:05 p.m.24 views

CVE-2026-28655

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00082EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:05 p.m.14 views

CVE-2026-28655

CVE-2026-28655 is a logic error in multiple functions of RemoteViews.java within the Android framework that permits a background activity launch bypass , enabling local privilege escalation. Exploitation requires low privileges , no user interaction, and no additional execution rights, yet can re...

7.8CVSS5.9AI score0.00082EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:05 p.m.9 views

EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00082EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:05 p.m.6 views

EUVD-2026-73981

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00077EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 6:05 p.m.24 views

CVE-2026-28642

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00077EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:05 p.m.36 views

CVE-2026-28642

CVE-2026-28642 is a high-severity (CVSS 7.8) local privilege escalation vulnerability in Android's ActivityStarter.java (method executeRequest), caused by a logic error that permits an unauthorized background activity launch. Exploitation requires low privileges and no user interaction , with hig...

7.8CVSS0.00077EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:04 p.m.6 views

EUVD-2026-73959

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00071EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 6:04 p.m.27 views

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00071EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:04 p.m.16 views

CVE-2026-28607

CVE-2026-28607 is a local elevation of privilege vulnerability in the Android Framework component, caused by a background activity launch bypass due to a confused deputy in multiple functions across multiple locations. No additional execution privileges or user interaction are required for exploi...

7.8CVSS5.9AI score0.00071EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 6:04 p.m.8 views

EUVD-2026-74048

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00077EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 6:04 p.m.29 views

CVE-2026-0084

CVE-2026-0084 is a local privilege escalation vulnerability in the Android framework , specifically in multiple functions of HostEmulationManager.java. A logic error permits an unintended background activity launch, allowing a local attacker to escalate privileges with no additional execution pri...

7.8CVSS0.00077EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 6:04 p.m.26 views

CVE-2026-0084

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00077EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 6:04 p.m.26 views

CVE-2026-0065

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

0.00077EPSS
SaveExploits0References1
Rows per page
Query Builder