Lucene search
+L

2486 matches found

Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.7 views

PT-2025-36026

Name of the Vulnerable Software and Affected Versions: AccessibilityServiceConnection.java affected versions not specified Description: A logic error in the code within AccessibilityServiceConnection.java may allow for the launch of background activities, potentially leading to local escalation o...

7.8CVSS6.2AI score0.00082EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.9 views

PT-2025-36025

Name of the Vulnerable Software and Affected Versions: LocationProviderManager affected versions not specified Description: A logic error in multiple functions within LocationProviderManager.java may allow for a background activity launch, potentially leading to local privilege escalation without...

7.8CVSS6.2AI score0.0009EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.7 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android that stems from a logic error that causes background activity to start, potentially leading to local elevation of privilege...

7.8CVSS6AI score0.0009EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.7 views

PT-2025-36070

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A missing permission check could allow recording audio via a background application, potentially leading to local escalation of privilege. User interaction is not required for exploitation...

7.8CVSS5.9AI score0.00112EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.9 views

Google Android 安全漏洞

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a privilege bypass vulnerability that can be exploited by ...

7.8CVSS6.4AI score0.00087EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/03 6:15 a.m.8 views

CVE-2025-21030

Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background...

4.3CVSS0.00157EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/03 6:15 a.m.7 views

CVE-2025-21025

Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management...

5.1CVSS0.00118EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/03 6:15 a.m.6 views

CVE-2025-21025

Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management...

4.4CVSS5.8AI score0.00118EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 6:5 a.m.22 views

CVE-2025-21030

Summary for CVE-2025-21030 : The vulnerability affects Samsung Mobile devices running Android with the AppPrelaunchManagerService. It stems from improper handling of insufficient permissions in the service, exposing a local attack surface that can let a non-privileged attacker cause arbitrary app...

4.3CVSS6.4AI score0.00157EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/03 6:5 a.m.5 views

CVE-2025-21030

Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background...

4.3CVSS6.4AI score0.00157EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/03 6:5 a.m.19 views

CVE-2025-21030

Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background...

4.3CVSS0.00157EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/03 6:5 a.m.4 views

CVE-2025-21025

Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management...

5.1CVSS6.1AI score0.00118EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/03 6:5 a.m.27 views

CVE-2025-21025

CVE-2025-21025 affects MARsExemptionManager in Samsung Mobile devices. The issue is improper access control in MARsExemptionManager before SMR Sep-2025 Release 1, enabling a local attacker to be excluded from background execution management. Documented details indicate the vulnerability is local ...

5.1CVSS6.1AI score0.00118EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.8 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper access control and could...

5.1CVSS6AI score0.00118EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.7 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper handling of permissions...

4.3CVSS6.6AI score0.00157EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.8 views

PT-2025-35679

Name of the Vulnerable Software and Affected Versions: MARsExemptionManager versions prior to SMR Sep-2025 Release 1 Description: Improper access control in MARsExemptionManager allows local attackers to be excluded from background execution management. Recommendations: Update MARsExemptionManage...

5.1CVSS6.1AI score0.00118EPSS
SaveExploits0References5
NVD
NVD
added 2025/09/02 11:15 p.m.9 views

CVE-2025-22437

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00089EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/02 11:15 p.m.7 views

CVE-2025-22437

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/02 11:15 p.m.8 views

CVE-2024-40653

In multiple functions of ConnectionServiceWrapper.java, there is a possible way to retain a permission forever in the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

7.3CVSS5.9AI score0.00114EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2025/09/02 10:11 p.m.6 views

CVE-2025-22437

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00089EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder