Lucene search
+L

13 matches found

BDU FSTEC
BDU FSTEC
•added 2026/06/04 12:00 a.m.•15 views

The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems allows a hacker to increase their privileges.

The vulnerability of the getCallingPackageName method in the Shared.java class of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.8AI score0.00068EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/06/01 10:16 p.m.•21 views

CVE-2026-0098

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00068EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/01 9:14 p.m.•18 views

CVE-2026-0098

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score0.00068EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/01 9:14 p.m.•21 views

CVE-2026-0098

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00068EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/06/01 9:14 p.m.•71 views

CVE-2026-0098

The Android operating system is vulnerable to a confused deputy issue in the getCallingPackageName method of the Shared.java class. This flaw allows an attacker to bypass activity start restrictions , which could lead to a local escalation of privilege . Exploitation does not require additional e...

7.8CVSS7.4AI score0.00068EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/06/01 12:00 a.m.•26 views

ASB-A-397217317

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00068EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/01 12:00 a.m.•56 views

PT-2026-45602

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A confused deputy issue exists in the getCallingPackageName function of Shared.java. This flaw allows for the bypass of activity start restrictions, potentially...

7.8CVSS7.2AI score0.00068EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/06/01 12:00 a.m.•29 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from the getCallingPackageName function in Shared.java code. This function contains obfuscation, potentially allowing bypass of activity laun...

7.8CVSS5.6AI score0.00068EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/01 12:00 a.m.•4 views

CVE-2026-0098: Unintended Proxy or Intermediary

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00068EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-26820

Malicious code in bioql PyPI...

7.8CVSS6.4AI score0.001EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/04 6:34 p.m.•3 views

CVE-2025-48531

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.001EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/04 6:34 p.m.•24 views

CVE-2025-48531

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.001EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/01 12:00 a.m.•31 views

ASB-A-389681530

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.001EPSS
SaveExploits0References2
Rows per page
Query Builder