Lucene search
+L

298 matches found

Kitploit
Kitploit
•added 2026/10/03 5:00 a.m.•12 views

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

8.8CVSS7.7AI score0.02615EPSS
SaveExploits0
NVD
NVD
•added 2026/09/08 7:17 p.m.•13 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00089EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 7:17 p.m.•13 views

CVE-2026-28655

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00102EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 7:17 p.m.•12 views

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00089EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 7:17 p.m.•14 views

CVE-2026-0084

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00077EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 6:05 p.m.•15 views

EUVD-2026-73992

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 6:05 p.m.•41 views

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 6:05 p.m.•35 views

CVE-2026-28655

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00102EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 6:05 p.m.•12 views

CVE-2026-28655

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00102EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 6:05 p.m.•28 views

CVE-2026-28655

A logic error in multiple functions of RemoteViews.java within the Android Framework enables a background activity launch bypass. This vulnerability can lead to local escalation of privilege (EoP) without requiring additional execution privileges or user interaction. The issue is addressed in the...

7.8CVSS6AI score0.00102EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/08 6:05 p.m.•17 views

EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00102EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 6:05 p.m.•12 views

EUVD-2026-73981

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00101EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 6:05 p.m.•10 views

CVE-2026-28642

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00101EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 6:05 p.m.•36 views

CVE-2026-28642

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00101EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 6:05 p.m.•45 views

CVE-2026-28642

A logic error in the executeRequest method of ActivityStarter.java within the Android Framework can lead to an unauthorized background activity launch. This vulnerability allows for a local escalation of privilege without requiring additional execution privileges or user interaction. Affected dev...

7.8CVSS6AI score0.00101EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/08 6:04 p.m.•11 views

EUVD-2026-73959

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 6:04 p.m.•37 views

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00089EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 6:04 p.m.•11 views

CVE-2026-28607

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00089EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 6:04 p.m.•26 views

CVE-2026-28607

CVE-2026-28607 identifies a confused deputy vulnerability in multiple functions and locations within the Android Framework . This flaw allows for a background activity launch bypass , which can lead to local escalation of privilege (EoP) without requiring additional execution privileges or user i...

7.8CVSS5.9AI score0.00089EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/08 6:04 p.m.•15 views

EUVD-2026-74048

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00077EPSS
SaveExploits0References1
Rows per page
Query Builder