CVE-2026-115195

A flaw was found in Mautic. Due to missing permission enforcement in the Stats application programming interface API, internal database tables are accessible by default without proper authorization. An authenticated remote user, even with an account lacking assigned privileges, can query these...

CVE-2026-69002

Incorrect authorization in Samsung framework services due to missing permission checks...

CVE-2026-69002

The Samsung framework services are affected by an incorrect authorization vulnerability caused by missing permission checks . This flaw allows for unauthorized access or actions within the framework. No specific impacted versions, root cause details, exploit information, or remediation instructio...

EUVD-2026-117283

Incorrect authorization in Samsung framework services due to missing permission checks...

PT-2026-137366

Incorrect authorization in Samsung framework services due to missing permission checks...

CVE-2026-59003

In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59005

In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58989

In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58866

In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-55261

In nfat4tnfceestorerxbuf of nfanfceeact.cc, there is a possible way to achieve code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28643

In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28621

In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115427

In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59005

A multiuser isolation issue exists in Google Android due to a missing permission check in the insertInternal method of MmsProvider.java. This vulnerability could lead to local escalation of privilege without requiring additional execution privileges or user interaction. While technical exploitati...

CVE-2026-59005

In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59003

In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-59003

A missing permission check in the getSubscriptionProperty method of SubscriptionManagerService.java within Google Android leads to a possible local information disclosure . This vulnerability allows an attacker to access information without requiring additional execution privileges or user intera...

EUVD-2026-115425

In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-115596

In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-58866

Google Android is affected by CVE-2026-58866 , where a missing permission check in the setAccessibilityWindowAttributes function of AccessibilityWindowManager.java results in a possible untrusted/misleading UI issue. This vulnerability can facilitate a local escalation of privilege without requir...