Lucene search
+L

2501 matches found

RedhatCVE
RedhatCVE
added 2025/09/04 10:32 p.m.7 views

CVE-2025-22437

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7AI score0.00089EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/04 10:32 p.m.10 views

CVE-2024-40653

In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

7.3CVSS6.9AI score0.00114EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/04 7:15 p.m.22 views

CVE-2025-48563

In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00086EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 7:15 p.m.5 views

CVE-2025-48563

In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00086EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 7:15 p.m.8 views

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.0009EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 7:15 p.m.10 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00112EPSS
SaveExploits0References6
NVD
NVD
added 2025/09/04 7:15 p.m.9 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00112EPSS
SaveExploits0References6
NVD
NVD
added 2025/09/04 7:15 p.m.20 views

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.0009EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 7:15 p.m.6 views

CVE-2025-26464

In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00096EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/04 7:15 p.m.9 views

CVE-2025-26464

In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00096EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.26 views

CVE-2025-48563

In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00086EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/04 6:34 p.m.39 views

CVE-2025-48563

CVE-2025-48563 covers an elevation-of-privilege flaw in Android caused by an insecure default value in onNullBinding of RemoteFillService.java. The issue can trigger a background activity launch without extra privileges or user interaction, enabling local privilege escalation. Public references c...

7.8CVSS6.3AI score0.00086EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/04 6:34 p.m.2 views

CVE-2025-48563

In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00086EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/04 6:34 p.m.7 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00112EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.18 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00112EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/09/04 6:34 p.m.2 views

CVE-2025-48549

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00112EPSS
SaveExploits0References6
CVE
CVE
added 2025/09/04 6:34 p.m.49 views

CVE-2025-48549

This CVE (CVE-2025-48549) describes an elevation of privilege in Google Android where a background app can potentially record audio due to a missing permission check. The issue is local and requires no user interaction; exploitation is described as local with high impact. Android's security bulle...

7.8CVSS6.2AI score0.00112EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2025/09/04 6:34 p.m.41 views

CVE-2025-48546

CVE-2025-48546 affects SafeActivityOptions.java. The issue arises during checkPermissions, enabling a possible background activity launch due to a logic error. This can lead to local escalation of privilege with no additional execution privileges required, and no user interaction needed for explo...

7.8CVSS6.3AI score0.0009EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.18 views

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/04 6:34 p.m.4 views

CVE-2025-48546

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.0009EPSS
SaveExploits0References2
Rows per page
Query Builder