Lucene search
+L

1387 matches found

OSV
OSV
added 2025/12/08 5:16 p.m.13 views

CVE-2025-48589

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00096EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/08 5:16 p.m.10 views

CVE-2025-48597

In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00079EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/08 4:57 p.m.32 views

CVE-2025-48639

In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.00101EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/08 4:57 p.m.28 views

CVE-2025-48639

CVE-2025-48639 affects the Android Framework, specifically DefaultTransitionHandler.java, where a tapjacking/overlay flaw can unknowingly grant permissions to an app. This enables local elevation of privilege with user interaction required for exploitation. Public references indicate patch levels...

7.3CVSS6.4AI score0.00101EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/08 4:57 p.m.4 views

CVE-2025-48639

In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.4AI score0.00101EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/08 4:57 p.m.35 views

CVE-2025-48597

CVE-2025-48597 is an Android Framework–level tapjacking/overlay vulnerability that could enable local privilege escalation without user interaction. Reported details indicate the issue affects Android Framework components and is addressed via Android security patches at patch levels 2025-12-01 / ...

7.8CVSS6.5AI score0.00079EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/08 4:57 p.m.30 views

CVE-2025-48536

In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...

0.00085EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/08 3:31 a.m.8 views

EUVD-2022-55683

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory leak in rsicoexattach The coexcb needs to be freed when rsicreatekthread failed in rsicoexattach...

4.7AI score0.00205EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/12/01 12:00 a.m.7 views

PT-2025-49016

In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.8CVSS6.8AI score0.00101EPSS
SaveExploits0References6
OSV
OSV
added 2025/12/01 12:00 a.m.10 views

ASB-A-436270922

In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00079EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/22 12:00 a.m.20 views

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2436)

According to the versions of the kernel package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : KVM: VMX: Do all initialization before exposing /dev/kvm to userspaceCVE-2022-49932 drivers:md:fix a potential use-after-free bugCVE-2022-50022 cep...

9.8CVSS7AI score0.0051EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/21 4:38 p.m.16 views

CVE-2025-62730

SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with usermanageteam role are allowed to modify permissions of users. However, they are able to assign administrative permissions to any user including themselves. This allow a malicious authenticated attacker with this...

8.8CVSS7AI score0.00292EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-2559

Malware in sbrugna...

10CVSS8.9AI score0.02549EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2000-0045

Malware in sbrugna...

6.4CVSS6.4AI score0.06992EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-4085

Malware in sbrugna...

5.5CVSS7.1AI score0.00527EPSS
SaveExploits1References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-5402

Malware in sbrugna...

4.7CVSS8.5AI score0.00417EPSS
SaveExploits0References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-5822

Malware in sbrugna...

8.8CVSS8.6AI score0.0041EPSS
SaveExploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2014-3954

Malware in sbrugna...

2.7CVSS6.2AI score0.00542EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-5821

Malware in sbrugna...

6.5CVSS7.3AI score0.00422EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-4187

Malware in sbrugna...

4.9CVSS8.2AI score0.00439EPSS
SaveExploits0References15
Rows per page
Query Builder