Lucene search
K

1045 matches found

NVD
NVD
added 2025/09/04 7:15 p.m.3 views

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

7.8CVSS0.00008EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 6:34 p.m.25 views

CVE-2025-48558

CVE-2025-48558 affects the Android BatteryService.java component, where multiple functions could enable implicit intent hijacking of a system app. This yields local elevation of privilege without extra privileges or user interaction. The connected documents confirm the vulnerability type and impa...

7.8CVSS6.3AI score0.00008EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/04 6:34 p.m.1 views

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

6.3AI score0.00008EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.4 views

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

0.00008EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/04 6:34 p.m.1 views

CVE-2025-48558

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

7.8CVSS5.9AI score0.00008EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.2 views

PT-2025-36077

Name of the Vulnerable Software and Affected Versions: BatteryService.java affected versions not specified Description: Multiple functions within BatteryService.java are susceptible to implicit intent hijacking, potentially allowing an attacker to redirect intents intended for a system applicatio...

7.8CVSS6AI score0.00008EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from an elevation of privilege vulnerability that stems from...

7.8CVSS6.6AI score0.00008EPSS
Exploits0References2
OSV
OSV
added 2025/09/01 12:0 a.m.6 views

ASB-A-380885270

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

7.8CVSS6.9AI score0.00008EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 10:9 a.m.2 views

SUSE-SU-2025:20593-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262...

7.5CVSS6.9AI score0.00879EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/08/08 4:27 a.m.4 views

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

5.5CVSS6.1AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2025/08/06 5:15 a.m.1 views

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

5.5CVSS5.8AI score0.00021EPSS
Exploits0References1
NVD
NVD
added 2025/08/06 5:15 a.m.2 views

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

5.5CVSS0.00021EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/06 4:23 a.m.6 views

CVE-2025-21024

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information...

3.3CVSS0.00021EPSS
Exploits0References1
CVE
CVE
added 2025/08/06 4:23 a.m.12 views

CVE-2025-21024

Samsung Smart View before Android 16 is affected by CVE-2025-21024 due to the use of implicit intents for sensitive communication, enabling local attackers to access sensitive information through the affected component. The issue is described across multiple sources as a vulnerability in Smart Vi...

5.5CVSS6.2AI score0.00021EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/06 12:0 a.m.3 views

PT-2025-32115 · Unknown · Usmartview

Name of the Vulnerable Software and Affected Versions: Smart View versions prior to Android 16 Description: The use of implicit intents for sensitive communication allows local attackers to access sensitive information. Recommendations: Update Smart View to Android 16 or later...

3.3CVSS6.3AI score0.00021EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.1 views

SAMSUNG Smart View 安全漏洞

SAMSUNG Smart View is a mobile screen casting application from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart View versions prior to 16, which stems from the use of implicit intent for sensitive communications and could lead to a local attacker accessing sensitive informati...

5.5CVSS6.2AI score0.00021EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/07/25 11:23 p.m.1 views

SUSE CVE-2025-38372

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and xaerase...

5.3CVSS6.5AI score0.00049EPSS
Exploits0References9
OSV
OSV
added 2025/07/25 1:15 p.m.1 views

DEBIAN-CVE-2025-38372

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and xaerase...

5.5CVSS5.4AI score0.00049EPSS
Exploits0References1
OSV
OSV
added 2025/07/25 1:15 p.m.0 views

UBUNTU-CVE-2025-38372

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and xaerase...

5.5CVSS5.7AI score0.00049EPSS
Exploits0References12
Cvelist
Cvelist
added 2025/07/25 12:53 p.m.5 views

CVE-2025-38372 RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xastore and xaerase...

0.00049EPSS
Exploits0References3
Rows per page
Query Builder