CVE-2026-12960

CVE-2026-12960 Exportación incorrecta de componentes de aplicación de Android en la aplicación ASUS Router Un componente incluido en la aplicación ASUS Router para Android com.asus.aihome se declaró android:exported="true" sin android:permission. Cualquier otra aplicación en el mismo dispositivo,...

JVN#70640802: "ABEMA" App for Android fails to restrict access permissions

"ABEMA" App for Android provided by AbemaTV, Inc. fails to restrict access permissions CWE-926 that allows another app installed on the user's device to access an arbitrary URL on "ABEMA" App via Intent. Impact An arbitrary website may be displayed on the app, and as a result, the user may become...

Emerging Ransomware Targets Photos, Videos on Android Devices

A new strain of ransomware has arisen in Canada, targeting Android users and locking up personal photos and videos. Called CryCryptor, it has initially been spotted pretending to be the official COVID-19 tracing app provided by Health Canada. It’s propagating via two different bogus websites that...