android-workprofile-exploit

Android Work Profile Security Research Controlled lab research on Android work-profile provisioning behavior, policy timing, and enterprise isolation boundaries. This repository documents academic security research performed in a controlled environment. It is not intended for unauthorized access,...

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s Framework component allows a hacker to increase their privileges.

The vulnerability of the setGlobalProxy method in the DevicePolicyManagerService.java class of the Android operating system’s framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability in the DevicePolicyManagerService.java class of the Android operating system component allows a hacker to trigger a service failure.

The vulnerability of the DevicePolicyManagerService.java class in the Android operating system framework is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the DevicePolicyManagerService.java class of the Android operating system component allows a hacker to trigger a service failure.

The vulnerability of the DevicePolicyManagerService.java class in the Android operating system framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-28578

The DevicePolicyManagerService.java class in the Android operating system framework is vulnerable to a local denial of service (DoS) due to improper input validation in multiple functions. This flaw can cause a desync from persistence, allowing an attacker to trigger a service failure without req...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from improper input validation in the setGlobalProxy function within DevicePolicyManagerService.java. This vulnerability may lead to persiste...

CVE-2021-0983

In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges neede...

CVE-2021-0986

In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User...

EUVD-2019-11660

Malware in sbrugna...

EUVD-2021-3187

Malicious code in bioql PyPI...

EUVD-2022-25771

Malicious code in bioql PyPI...

EUVD-2025-26596

Malicious code in bioql PyPI...

EUVD-2021-3601

Malicious code in bioql PyPI...

EUVD-2023-25335

Malicious code in bioql PyPI...

The vulnerability of the handlePackagesChanged() function in the DevicePolicyManagerService.java module of Android operating systems allows a malicious actor to escalate their privileges, execute arbitrary code, and cause service failures.

The vulnerability of the handlePackagesChanged function in the DevicePolicyManagerService.java module of Android operating systems is related to errors in the code. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, and cause service failures...

The vulnerability of the saveGlobalProxyLocked() function in the DevicePolicyManagerService.java module of Android operating systems allows a malicious actor to elevate their privileges and execute arbitrary code.

The vulnerability of the saveGlobalProxyLocked function in the DevicePolicyManagerService.java module of Android operating systems is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

The vulnerability of the handlePackagesChanged() function in the DevicePolicyManagerService.java module of Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the handlePackagesChanged function in the DevicePolicyManagerService.java module of Android operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...

Google Android Denial of Service Vulnerability (CNVD-2025-23027)

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which is caused by a logic error in the handlePackagesChanged function in DevicePolicyManagerService.java. An attacker can exploit this vulnerability to cause a...

CVE-2025-48552

In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48554

A logic error in the handlePackagesChanged function of the DevicePolicyManagerService.java module in Android operating systems leads to a persistent denial of service (DoS). An attacker can exploit this vulnerability to cause service failures, and while no additional execution privileges are requ...