Lucene search
K

34 matches found

ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-28586

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00004EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 5 days ago26 views

CVE-2026-28586

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00004EPSS
Exploits0References1
CNNVD
CNNVD
added 5 days ago5 views

Google Android security vulnerabilities

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from missing permission checks for multiple functions in AppOpsService.java. This vulnerability may lead to the disclosure of local informati...

3.3CVSS5.8AI score0.00004EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/04 1:57 a.m.2 views

CVE-2026-0015

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS6.1AI score0.00002EPSS
Exploits0References1
NVD
NVD
added 2026/03/02 7:16 p.m.2 views

CVE-2026-0015

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS0.00002EPSS
Exploits0References1
NVD
NVD
added 2026/03/02 7:16 p.m.4 views

CVE-2026-0014

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS0.00002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 6:42 p.m.1 views

CVE-2026-0015

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS6.1AI score0.00002EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/03/02 6:42 p.m.9 views

CVE-2026-0015

CVE-2026-0015 affects Android components, notably multiple locations in AppOpsService.java where improper input validation can cause a persistent, local Denial of Service . Exploitation requires no user interaction and does not grant additional privileges. The Red Hat/NCSC/NVD entries corroborate...

6.2CVSS6.1AI score0.00002EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/03/02 6:42 p.m.1 views

EUVD-2026-9232

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS6.1AI score0.00002EPSS
Exploits0References1
OSV
OSV
added 2026/03/01 12:0 a.m.4 views

ASB-A-443742082

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS6.1AI score0.00002EPSS
Exploits0References2
OSV
OSV
added 2025/12/01 12:0 a.m.5 views

ASB-A-417987184

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...

5.5CVSS5.9AI score0.00009EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.2 views

PT-2025-43478

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...

1.7CVSS5.9AI score0.00009EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-25502

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-26806

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00009EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.4 views

CVE-2025-48559

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0001EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/04 6:34 p.m.1 views

CVE-2025-48559

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.6AI score0.0001EPSS
Exploits0References2
NVD
NVD
added 2025/09/04 6:15 p.m.2 views

CVE-2025-26429

In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.0001EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 5:11 p.m.426 views

CVE-2025-26429

CVE-2025-26429 is an Android vulnerability where the collectOps path in AppOpsService.java allows a local DoS due to improper input validation. Exploitation is local with no user interaction and no extra privileges required. The connected advisories reference Android security bulletins and vendor...

5.5CVSS5.6AI score0.0001EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/04 5:11 p.m.1 views

CVE-2025-26429

In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.6AI score0.0001EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.3 views

PT-2025-36078

Name of the Vulnerable Software and Affected Versions: AppOpsService.java affected versions not specified Description: The software contains a flaw in multiple functions of AppOpsService.java due to improper input validation. This can allow an attacker to add a large amount of app ops, potentiall...

5.5CVSS5.8AI score0.0001EPSS
Exploits0References5
Rows per page
Query Builder