Lucene search
+L

41637 matches found

OSV
OSV
added 2025/09/04 8:15 p.m.7 views

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

3.3CVSS5.9AI score0.00088EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/04 8:15 p.m.12 views

CVE-2025-22414

In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00079EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/04 7:28 p.m.17 views

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.00088EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/04 7:28 p.m.37 views

CVE-2025-26419

CVE-2025-26419 affects the Wear OS/Android component SystemSettingsFragment.java (initPhoneSwitch). A logic error enables a Factory Reset Protection (FRP) bypass, potentially allowing local elevation of privilege. Exploitation requires user interaction; no additional execution privileges are need...

3.3CVSS6.4AI score0.00088EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/04 7:28 p.m.5 views

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.4AI score0.00088EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/04 7:23 p.m.6 views

CVE-2025-22414

In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00079EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/04 7:23 p.m.42 views

CVE-2025-22414

CVE-2025-22414 concerns a local elevation of privilege in FrpBypassAlertActivity.java due to a missing permission check, enabling FRP bypass without user interaction. Public sources identify the Wear OS/System component context and classify the issue as High severity with local access required (A...

7.8CVSS6.2AI score0.00079EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/04 7:23 p.m.17 views

CVE-2025-22414

In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00079EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/04 7:15 p.m.5 views

CVE-2025-32345

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS5.9AI score0.00088EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/04 7:15 p.m.11 views

CVE-2025-32345

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS0.00088EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/04 6:33 p.m.18 views

CVE-2025-32345

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

0.00088EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/04 6:33 p.m.3 views

CVE-2025-32345

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

6.3AI score0.00088EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/04 6:15 p.m.11 views

CVE-2025-26435

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS0.00082EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 6:15 p.m.9 views

CVE-2025-26435

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS5.9AI score0.00082EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/04 5:11 p.m.19 views

CVE-2025-26435

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

0.00082EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/04 5:11 p.m.449 views

CVE-2025-26435

CVE-2025-26435 affects ContentProtectionTogglePreferenceController.java and is due to a logic error in updateState that could allow a secondary user to disable the primary user's app scanning setting, enabling local privilege escalation without additional privileges or user interaction. The entry...

7.8CVSS6.3AI score0.00082EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/09/04 4:15 p.m.7 views

CVE-2025-38716

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

5.5CVSS0.00145EPSS
SaveExploits0References5
OSV
OSV
added 2025/09/04 4:15 p.m.5 views

DEBIAN-CVE-2025-38716

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

5.5CVSS5.3AI score0.00145EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/04 4:15 p.m.8 views

UBUNTU-CVE-2025-38716

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

5.5CVSS5.8AI score0.00145EPSS
SaveExploits0References24
CVE
CVE
added 2025/09/04 3:33 p.m.41 views

CVE-2025-38716

CVE-2025-38716 affects the Linux kernel and relates to the hfs_find_init() code path. The vulnerability arises when the tree pointer is NULL, potentially triggering a general protection fault / null pointer dereference during HFS operations (e.g., ext_read_extent, get_block, and subsequent file m...

5.5CVSS5.9AI score0.00145EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder