Lucene search
+L

43 matches found

NVD
NVD
•added 2026/06/01 10:16 p.m.•32 views

CVE-2026-0077

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch bal due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00082EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/01 9:14 p.m.•24 views

CVE-2026-0077

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch bal due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00082EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/01 9:14 p.m.•62 views

CVE-2026-0077

A logic error in the resumeConfigurationDispatch method of the ActivityRecord.java class within the Android Framework component allows for a possible background application launch (bal) . This vulnerability can be exploited to achieve local escalation of privilege without requiring additional exe...

7.8CVSS7.8AI score0.00082EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/06/01 12:00 a.m.•23 views

ASB-A-467082881

In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch bal due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00082EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 5:27 p.m.•11 views

CVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS7.4AI score0.00377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 5:27 p.m.•16 views

CVE-2025-48573

In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6.8AI score0.00088EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/08 5:16 p.m.•21 views

CVE-2025-48573

In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.9AI score0.00088EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/08 4:57 p.m.•3 views

CVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.2AI score0.00377EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/08 4:57 p.m.•65 views

CVE-2025-48573

A security vulnerability exists in the Android Framework component (specifically within MediaSessionRecord.java) where an attacker can abuse FGS while-in-use to launch a foreground service while the application is in the background. This flaw allows for local escalation of privilege without requi...

7.8CVSS7.7AI score0.00088EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/12/08 4:56 p.m.•34 views

CVE-2025-32319

A permissions bypass vulnerability exists in the RemotePrintService.java file within the Android Framework component. Specifically, the ensureBound method allows a background application to improperly retain foreground permissions. This flaw could lead to a local escalation of privilege , requiri...

6.7CVSS7.7AI score0.00087EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/08 4:56 p.m.•6 views

CVE-2025-32319

In ensureBound of RemotePrintService.java, there is a possible way for a background app to keep foreground permissions due to a permissions bypass. This could lead to local escalation of privilege with user execution privileges needed. User interaction is not needed for exploitation...

7.7AI score0.00087EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•12 views

PT-2025-43453

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems related to insufficient protection of service data. Exploitation may allow a remote attacker to elevate privileges...

7.5CVSS6.1AI score0.00087EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2013-4977

Malware in sbrugna...

2.6CVSS6.3AI score0.01457EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-18837

Malware in sbrugna...

7.3CVSS7.3AI score0.00173EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-50930

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00335EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/04 7:15 p.m.•16 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00115EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2025/09/04 6:34 p.m.•9 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00115EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/04 6:34 p.m.•2 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00115EPSS
SaveExploits0References6
CVE
CVE
•added 2025/09/04 6:34 p.m.•61 views

CVE-2025-48549

A privilege escalation vulnerability exists in the Android operating system due to a missing permission check in multiple locations. This flaw allows a background application to record audio without proper authorization, potentially leading to a local escalation of privilege without requiring add...

7.8CVSS7.4AI score0.00115EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/09/01 12:00 a.m.•19 views

ASB-A-325912429

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00115EPSS
SaveExploits0References6
Rows per page
Query Builder