Lucene search
+L

6973 matches found

NVD
NVD
added 2026/03/16 2:18 p.m.17 views

CVE-2026-21002

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application...

5.9CVSS0.00068EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/16 2:17 p.m.11 views

CVE-2025-52458

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

7.8CVSS0.0016EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/16 2:17 p.m.6 views

CVE-2025-41432

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

7.8CVSS0.00172EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/16 2:17 p.m.7 views

CVE-2025-25277

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios...

7CVSS0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/16 7:10 a.m.6 views

CVE-2025-52458 arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

5.5CVSS6.3AI score0.0016EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/16 7:10 a.m.4 views

CVE-2025-52458

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

5.5CVSS6.3AI score0.0016EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/03/16 7:10 a.m.12 views

CVE-2025-52458

OpenHarmony is affected: OpenHarmony v5.1.0 and earlier contain an out-of-bounds write vulnerability that enables a local attacker to achieve arbitrary code execution in pre-installed apps, but details on exploit vectors, impacted components, and available fixes are not provided in the supplied d...

7.8CVSS6.3AI score0.0016EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/16 7:10 a.m.36 views

CVE-2025-52458 arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

5.5CVSS0.0016EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/16 7:9 a.m.15 views

CVE-2025-25277

OpenHarmony CVE-2025-25277 describes a local code execution vulnerability in OpenHarmony v5.1.0 and earlier, caused by a type confusion in arkcompiler_ets_runtime that can be triggered by using an incompatible type in pre-installed apps. Affected components are not enumerated beyond the arkcompil...

7CVSS6.3AI score0.00151EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/16 7:9 a.m.7 views

CVE-2025-25277

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios...

6.3CVSS6.3AI score0.00151EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/16 7:9 a.m.8 views

CVE-2025-25277 arkcompiler_ets_runtime has a type confusion vulnerability

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios...

6.3CVSS6.3AI score0.00151EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/03/16 5:43 a.m.10 views

Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse

Google is testing a new security feature as part of Android Advanced Protection Mode AAPM that prevents certain kinds of apps from using the accessibility services API. The change, incorporated in Android 17 Beta 2, was first reported by Android Authority last week. AAPM was introduced by Google ...

5.8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/16 4:32 a.m.3 views

CVE-2026-21002

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application...

5.9CVSS5.9AI score0.00068EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/16 4:32 a.m.13 views

CVE-2026-21002

Galaxy Store before version 4.6.03.8 suffers from improper verification of cryptographic signatures, enabling a local attacker to install arbitrary applications. This CVE entry (CVE-2026-21002) has a connected vulnerability record (EUVD-2026-12321) that specifies the root cause and impact. Affect...

5.9CVSS5.9AI score0.00068EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.7 views

OpenHarmony 安全漏洞

OpenHarmony is an open-source project for a Harmony operating system developed by the OpenAtom Foundation in China. OpenHarmony v5.1.0 and earlier versions have security vulnerabilities. These vulnerabilities stem from the use of incompatible types, which may allow local attackers to execute...

7CVSS6.2AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.9 views

SAMSUNG Galaxy Store 安全漏洞

SAMSUNG Galaxy Store is an application store owned by South Korean company Samsung. Versions of SAMSUNG Galaxy Store prior to version 4.6.03.8 contained security vulnerabilities. These vulnerabilities stemmed from improper encryption signature verification, which could allow local attackers to...

5.9CVSS5.9AI score0.00068EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.7 views

PT-2026-25626

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

5.5CVSS6.3AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.14 views

PT-2026-25625

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

5.5CVSS6.3AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.8 views

PT-2026-25623

in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios...

6.3CVSS6.3AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.20 views

PT-2026-25607

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application...

5.9CVSS5.9AI score0.00068EPSS
SaveExploits0References1
Rows per page
Query Builder