CVE-2026-95180

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...

EUVD-2026-102130

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...

CVE-2026-95180

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...

CVE-2026-95180

An issue in Justson agentweb-core versions v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components . This is caused by incorrect access control during the handling of intent:// URLs within the DefaultWebClient compone...

EUVD-2014-9458

Malware in sbrugna...

EUVD-2017-16734

Malware in sbrugna...

SUSE CVE-2014-9648

components/navigationinterception/interceptnavigationresourcethrottle.cc in Google Chrome before 40.0.2214.91 on Android does not properly restrict use of intent: URLs to open an application after navigation to a web site, which allows remote attackers to cause a denial of service loss of browser...

SUSE CVE-2017-7759

Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of local data through a violation of same-origin policy. Note: This attack only affects Firefox for Android. Other operating systems are not affected...

CVE-2017-7759

Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of local data through a violation of same-origin policy. Note: This attack only affects Firefox for Android. Other operating systems are not affected...

CVE-2017-7759: Exposure of Sensitive Information to an Unauthorized Actor

Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of local data through a violation of same-origin policy. Note: This attack only affects Firefox for Android. Other operating systems are not affected...

PT-2018-8425

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 54 Description A security issue exists where Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs. This allows for the reading of local dat...

CVE-2016-5197

The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page...

CVE-2016-5197: Improper Input Validation

The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page...

PT-2017-1061

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.85 for Android Description The issue is related to insufficient validation of intent URLs in the content view client, allowing a remote attacker who has compromised the renderer process to start...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00819)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the components/navigationinterception/interceptnavigationresourcethrottle.cc file in versions of Google Chrome prior to 40.0.2214.91, which stems from the program's failure to restri...

Design/Logic Flaw

components/navigationinterception/interceptnavigationresourcethrottle.cc in Google Chrome before 40.0.2214.91 on Android does not properly restrict use of intent: URLs to open an application after navigation to a web site, which allows remote attackers to cause a denial of service loss of browser...