Lucene search
+L

19 matches found

NVD
NVD
•added 2026/09/08 7:17 p.m.•13 views

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS0.00386EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:44 p.m.•23 views

CVE-2026-0050

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.6AI score0.00068EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•27 views

EUVD-2026-33779

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00068EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/01 9:14 p.m.•46 views

CVE-2026-0050

The Android operating system contains a permissions bypass vulnerability in the handleBondStateChanged method of the AdapterService.java class. This flaw allows for local information disclosure , potentially exposing sensitive data protected by security measures. Exploitation does not require add...

3.3CVSS5.7AI score0.00068EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/01 9:14 p.m.•16 views

CVE-2026-0050

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.7AI score0.00068EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/01 9:14 p.m.•14 views

CVE-2026-0050

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00068EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/01 9:14 p.m.•57 views

CVE-2026-0050

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00068EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/01 12:00 a.m.•21 views

ASB-A-290364858

In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.5AI score0.00068EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-25851

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00309EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-25852

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00152EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/30 6:20 p.m.•7 views

CVE-2025-0092

In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS6.2AI score0.00152EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/26 11:15 p.m.•14 views

CVE-2025-0092

In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS5.9AI score0.00152EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/26 11:15 p.m.•15 views

CVE-2025-0093

In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

7.5CVSS5.9AI score0.00309EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/26 10:48 p.m.•92 views

CVE-2025-0093

Google Android is affected by an information disclosure vulnerability due to a missing permission check within the handleBondStateChanged method of AdapterService.java. An attacker can exploit this flaw to obtain sensitive information without requiring additional execution privileges. While the v...

7.5CVSS6.3AI score0.00309EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/08/26 10:48 p.m.•22 views

CVE-2025-0093

In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

0.00309EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/26 10:48 p.m.•26 views

CVE-2025-0092

In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

0.00152EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/26 10:48 p.m.•93 views

CVE-2025-0092

Google Android is affected by a permission bypass vulnerability in the handleBondStateChanged method of AdapterService.java . The root cause is attributed to misleading or insufficient UI , which can lead to remote (proximal/adjacent) information disclosure . This vulnerability does not require a...

6.5CVSS6.4AI score0.00152EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•10 views

PT-2025-11065 · Google · Android

Name of the Vulnerable Software and Affected Versions: AdapterService.java affected versions not specified Description: The software contains a possible unapproved data access due to a missing permission check within the handleBondStateChanged function of AdapterService.java. This could lead to...

7.5CVSS6.3AI score0.00309EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/06/22 12:15 p.m.•10 views

CVE-2021-0549

In sspRequestCallback of BondStateMachine.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.4CVSS5.7AI score0.00117EPSS
SaveExploits0References2
Rows per page
Query Builder