CVE-2025-48541

In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48541

The Android operating system contains a security vulnerability in the onCreate function of the FaceSettings.java file. Due to improper input validation , an attacker could remove biometric unlock functionality across all user profiles. This flaw facilitates a local escalation of privilege without...

CVE-2025-48541

In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from improper input validation and could lead to the removal of biometric unlocking functionality across user profiles...

CVE-2025-1740

creationtimestamp| type| source ---|---|--- 2025-09-03 10:32:23+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxwgjev75c2u 2025-09-03 10:50:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxwhkd65th2p...

CVE-2025-21037

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability...

CVE-2025-21037

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability...

CVE-2025-21035

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles...

CVE-2025-21037

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability...

CVE-2025-21037

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability...

PT-2025-35689

Name of the Vulnerable Software and Affected Versions: Samsung Calendar versions prior to 12.5.06.5 in Android 14 Samsung Calendar versions prior to 12.6.01.12 in Android 15 Description: Improper access control in Samsung Calendar allows physical attackers to access data across multiple user...

CVE-2025-21035: Undefined Security Weakness

Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles...

CVE-2025-21037: Undefined Security Weakness

Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-41690

creationtimestamp| type| source ---|---|--- 2025-09-02 08:12:45+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lxto4gevws42 2025-09-02 09:02:01+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxtqyuoivl2n 2025-09-02 10:17:02+00:00| seen|...

CVE-2025-9815

creationtimestamp| type| source ---|---|--- 2025-09-02 06:01:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lxtgwsytgh2p 2025-09-02 08:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxtq3gpq7b27...

ASB-A-411418366

In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-28080

creationtimestamp| type| source ---|---|--- 2025-08-29 08:28:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lxjnc5a2un2b 2025-08-29 08:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3lxjnuyywif2r 2025-08-29 13:01:40+00:00| published-proof-of-concept|...

CVE-2025-0083

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...