SUSE CVE-2017-5463

Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerabili...

SUSE CVE-2019-13707

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application...

SUSE CVE-2020-15980

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents...

SUSE CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

SUSE CVE-2022-1130

Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app...

SUSE CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Android 14 developer preview highlights multiple security improvements

Android developers have been given a taste of whats to come in the next big step up in mobile land, thanks to Android 14 waiting on the horizon. The developer preview is a great way for those most familiar with the mobile operating system to see which changes theyll enjoy and what ones theyll hav...

CVE-2023-21447

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent...

CVE-2023-21445

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R11, 13.1.03.501 in Android S12 and 14.1.00.422 in Android T13 allows local attacker to write file with MyFiles privilege via implicit intent...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. SAMSUNG Mobile devices Android R11 before 12.2.09, Android S12 before 13.1.03.501, and Android T13 before 14.1.00.422 contain a security...

CVE-2022-3229

Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker can change or disable authentication requirements for the Unified Remote protocol, and leverage this now-unauthenticated access to run code ...

CVE-2022-3229

CVE-2022-3229 affects Unified Remote’s web management interface for Unified Remote; the interface does not require authentication, enabling a remote, unauthenticated attacker to change or disable authentication for the Unified Remote protocol and then execute code. The issue has an established CV...

PT-2023-4137 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 109.0.5414.119 Description: The issue is related to insufficient policy enforcement in Intents, allowing a remote attacker to bypass the same origin policy via a crafted HTML page. This could...

PT-2022-25087 · Unknown · Contactliststartactivityhelper

Name of the Vulnerable Software and Affected Versions: Phone versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the ContactListStartActivityHelper. This vulnerability allows access to sensitive information via an implicit...

DEBIAN-CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Input validation

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

UBUNTU-CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2022-3317

CVE-2022-3317 refers to Google Chrome on Android with insufficient validation of untrusted input in Intents, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue affects Chrome on Android prior to version 106.0.5249.62. Root cause per the available docum...