CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26424

The CVE CVE-2025-26424 concerns VpnManager.java in the Android framework, where a logic error enables cross-user data leakage. The impact is local information disclosure without extra privileges or user interaction. Exploitation details are not provided in the connected documents, and there is no...

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Information Disclosure Vulnerability (CNVD-2026-00039)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to cross-user image disclosure caused by an obfuscated proxy in the showAvatarPicker of EditUserPhotoController.java. An attacker can exploit the...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is a cross-user file leak due to a logic error in the getDestinationForApp function in SpaAppBridgeActivity. An attacker can exploit the vulnerabili...

PT-2025-36009

Name of the Vulnerable Software and Affected Versions: VpnManager.java affected versions not specified Description: Multiple functions within VpnManager.java contain a logic error that may result in cross-user data leakage, potentially leading to local information disclosure. Exploitation does no...

PT-2025-36012

Name of the Vulnerable Software and Affected Versions: SpaAppBridgeActivity affected versions not specified Description: A logic error in the getDestinationForApp function within SpaAppBridgeActivity may allow for cross-user file reveal, potentially leading to local escalation of privilege. User...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, an American company. Google Android suffers from a security vulnerability that stems from a logic error that could lead to cross-user data leakage...

PT-2025-36043

Name of the Vulnerable Software and Affected Versions: SpaActivity.kt affected versions not specified Description: A logic error exists in startSpaActivityForApp of SpaActivity.kt that may allow a cross-user permission bypass. This could lead to local privilege escalation without requiring...

PT-2025-36023

Name of the Vulnerable Software and Affected Versions: BluetoothOppSendFileInfo.java affected versions not specified Description: A logic error exists in the isContentUriForOtherUser function within BluetoothOppSendFileInfo.java, potentially leading to a cross-user data leak. This issue could...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2025-36055

Name of the Vulnerable Software and Affected Versions: VoicemailNotificationSettingsUtil.java affected versions not specified Description: A cross-user data leak exists due to a confused deputy condition within the setRingtoneUri function of the VoicemailNotificationSettingsUtil.java file. This...

Google Android 安全漏洞

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a logic error vulnerability that can be exploited by...

Linux Distros Unpatched Vulnerability : CVE-2020-11997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Guacamole 1.2.0 and earlier do not consistently restrict access to connection history based on user visibility. If multiple users share access to the sam...

CVE-2024-49722

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22428

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user from the primary user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-49728

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...