Lucene search
+L

89158 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 8:53 a.m.•17 views

CVE-2021-33699

Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifest.xml with their Task Control features. This allows an unauthorized attacker or malware to takeover legitimate apps and to steal user's sensitive information...

7.6CVSS6.8AI score0.01247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:43 a.m.•24 views

CVE-2022-33274

Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication...

8.4CVSS7AI score0.00119EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/09 7:16 a.m.•10 views

CVE-2026-20972

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...

3.3CVSS5.8AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/09 7:16 a.m.•17 views

CVE-2026-20972

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...

4.8CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/09 6:16 a.m.•59 views

CVE-2026-20972

CVE-2026-20972 corresponds to Samsung’s SVE-2025-2255. Description: Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB. Connected docs indicate this is addressed by a Samsung patch in the SMR Jan-2026 Release 1, descri...

4.8CVSS6AI score0.00128EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/09 6:16 a.m.•7 views

CVE-2026-20972

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...

4.8CVSS6AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•19 views

PT-2026-2053

Name of the Vulnerable Software and Affected Versions UwbTest versions prior to SMR Jan-2026 Release 1 Description The application improperly exports Android components, potentially allowing a local attacker to enable Ultra-Wideband UWB functionality. Recommendations Update UwbTest to SMR Jan-202...

4.8CVSS6.2AI score0.00128EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•1 views

CVE-2026-20972: Undefined Security Weakness

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...

4.8CVSS5.8AI score0.00128EPSS
SaveExploits0References1
Krebs on Security
Krebs on Security
•added 2026/01/08 11:23 p.m.•15 views

Who Benefited from the Aisuru and Kimwolf Botnets?

Our first story of 2026 revealed how a destructive new botnet called Kimwolf has infected more than two million devices by mass-compromising a vast number of unofficial Android TV streaming boxes. Today, we'll dig through digital clues left behind by the hackers, network operators and services th...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•1 views

CVE-2025-15464: Improper Export of Android Application Components

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

7.5CVSS5.8AI score0.00525EPSS
SaveExploits1References1
KoreLogic Security
KoreLogic Security
•added 2026/01/08 12:00 a.m.•91 views

yintibao Fun Print Mobile Unauthorized Access via Context Hijacking

Vulnerability Details Affected Vendor: yintibao Affected Product: Fun Print Mobile Affected Version: 6.05.15 Platform: ARM64 - Android CWE Classification: CWE-926: Improper Export of Android Application Components CVE ID: CVE-2025-15464 2. Vulnerability Description Exported Activity allows...

7.5CVSS6.8AI score0.00525EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2026/01/07 11:15 p.m.•28 views

CVE-2025-62224

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

5.5CVSS0.00311EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/07 11:15 p.m.•11 views

CVE-2025-62224

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

3.5CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 10:54 p.m.•35 views

CVE-2025-62224 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

5.5CVSS0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/07 10:54 p.m.•9 views

CVE-2025-62224 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

5.5CVSS6.6AI score0.00311EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/07 10:54 p.m.•39 views

CVE-2025-62224

CVE-2025-62224 affects Microsoft Edge for Android. The issue is a UI misrepresentation of critical information in the browser, enabling a network-based spoofing scenario by an authorized attacker. Documented impact is spoofing of the user interface with low to medium severity in various sources; ...

5.5CVSS6AI score0.00311EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:51 a.m.•14 views

CVE-2013-6792

Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability...

9.8CVSS6.9AI score0.02991EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:32 a.m.•20 views

CVE-2019-16253

The Text-to-speech Engine aka SamsungTTS application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755...

7.8CVSS7AI score0.01192EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:31 a.m.•13 views

CVE-2019-16248

The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previously sent image analogous to supported...

5.5CVSS6.7AI score0.00439EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:31 a.m.•15 views

CVE-2019-16272

On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge adb enablement...

9.8CVSS7.1AI score0.01162EPSS
SaveExploits0References1
Rows per page
Query Builder