CVE-2026-21063

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...

CVE-2025-68709

SailingLab AppLock (com.alpha.applock) version 4.3.8 for Android is vulnerable to arbitrary JavaScript execution . The root cause is that the BrowserMainActivity component improperly accepts VIEW intents containing javascript: URIs . This unsafe navigation path allows a local attacker to execute ...

CVE-2025-68709

SailingLab AppLock aka com.alpha.applock 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts VIEW intents with javascript: URIs. This unsafe navigation path results in script execution and may allow UI spoofing or privilege...