1052 matches found
CVE-2025-22420
CVE-2025-22420 is a local elevation-of-privilege vulnerability in the Android Framework that could allow leaking audio files across user profiles due to a confused deputy. Exploitation is described as requiring no user interaction and being locally executable. The Android security bulletin and Re...
CVE-2025-22420
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22420
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-376462130
In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-337775777
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-418774489
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-337784859
In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-117470
Malicious code in confused-sapphire-scorpion npm...
EUVD-2025-100271
Malicious code in confusedreptilez3n npm...
EUVD-2025-106011
Malicious code in confusedcowz3n npm...
EUVD-2025-92681
Malicious code in confusedaphidz3n npm...
EUVD-2025-92679
Malicious code in confusedponyz3n npm...
EUVD-2025-77266
Malicious code in confusedkiwi-gooddev npm...
EUVD-2025-77265
Malicious code in confusedpossum-teagooddev npm...
EUVD-2025-79562
Malicious code in confusedratz3n npm...
EUVD-2025-79563
Malicious code in confusedmagpiez3n npm...
EUVD-2025-82407
Malicious code in confusedslug0xrequest npm...
EUVD-2025-64833
Malicious code in confusedwhitefishz3n npm...