CVE-2025-22434

A logic error in the handleKeyGestureEvent function of PhoneWindowManager.java within the Framework component of Google Android allows for a possible lock screen bypass . This vulnerability can be exploited to achieve local elevation of privilege without requiring additional execution privileges ...

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22427

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2025-22427

A logic error in the onCreate function of NotificationAccessConfirmationActivity.java allows an attacker to grant notification access above the lock screen. This vulnerability leads to a local elevation of privilege (EoP) without requiring additional execution privileges. Exploitation requires us...

CVE-2025-22427

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2025-22427

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

PT-2025-35628

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code within NotificationAccessConfirmationActivity.java may allow granting notification access above the lock screen. This could lead to local escalation of privilege,...

CVE-2025-22434: Protection Mechanism Failure

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-35633

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error exists in the handleKeyGestureEvent function of PhoneWindowManager.java that may allow a lock screen bypass. Successful exploitation could lead to local privilege escalation...

CVE-2025-22427: Protection Mechanism Failure

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2025-48351

Cross-Site Request Forgery CSRF vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through = 1.4...

Linux Distros Unpatched Vulnerability : CVE-2020-4050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, misuse of the set-screen-option filter's return value allows arbitrary user meta fields to be saved. It does require an admin...

Linux Distros Unpatched Vulnerability : CVE-2021-21443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x...

Linux Distros Unpatched Vulnerability : CVE-2021-34557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in updatescreenlayout allows an attacker to...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

A security vulnerability in macOS Sequoia allows an application to record the screen without a visible indicator. This issue was addressed with improved checks and is fixed in macOS Sequoia 15.2 . Exploitation details are not provided in the documents.

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...