Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-26838

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00008EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 6:33 p.m.28 views

CVE-2025-32326

CVE-2025-32326 describes a local elevation of privilege in Android via a confused deputy in AppRestrictionsFragment.java, enabling bypass of the intent security check. Impact is local with user interaction required; no additional execution privileges needed. Root cause: insecure bypass in multipl...

7.8CVSS6.4AI score0.00008EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/09/04 6:33 p.m.4 views

CVE-2025-32326

In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.00008EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.5 views

PT-2025-36038

Name of the Vulnerable Software and Affected Versions: AppRestrictionsFragment.java affected versions not specified Description: The software contains a potential confused deputy issue in multiple functions within the AppRestrictionsFragment.java file. This could allow for local privilege...

7.8CVSS6.3AI score0.00008EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 7:10 a.m.3 views

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.7CVSS7.2AI score0.00109EPSS
Exploits0References1
OSV
OSV
added 2025/01/28 8:15 p.m.3 views

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.7CVSS5.9AI score0.00109EPSS
Exploits0References2
NVD
NVD
added 2025/01/28 8:15 p.m.19 views

CVE-2024-40676

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.7CVSS0.00109EPSS
Exploits0References2
CVE
CVE
added 2025/01/28 7:13 p.m.323 views

CVE-2024-40676

CVE-2024-40676 affects Google Android. The issue lies in checkKeyIntent of AccountManagerService.java, which can bypass the intent security check and allow installing an unknown app due to a confused deputy. This enables local elevation of privilege without requiring execution privileges or user ...

7.7CVSS7.5AI score0.00109EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder