CVE-2025-58641: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/a through = 1.0.1...

CVE-2025-21039: Undefined Security Weakness

Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information...

PT-2025-35677

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Apr-2022 Release 1 Description An intent redirection issue exists in SecSettings that allows attackers to access arbitrary files with system privileges. Recommendations Update SecSettings to SMR Apr-2022 Relea...

PT-2025-35694

Name of the Vulnerable Software and Affected Versions S Assistant versions prior to 9.3.2 Description Improper verification of intent by ExternalBroadcastReceiver in S Assistant allows local attackers to modify itinerary information. Recommendations Update S Assistant to version 9.3.2 or later...

CVE-2023-21474: Undefined Security Weakness

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...

PT-2025-35681

Name of the Vulnerable Software and Affected Versions: ImsService versions prior to SMR Sep-2025 Release 1 Description: Improper verification of intent by a broadcast receiver in ImsService allows local attackers to temporarily disable the SIM. Recommendations: Update ImsService to SMR Sep-2025...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22433

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2025-22433

A logic error in the canForward function of IntentForwarderActivity.java within the Google Android operating system allows for a bypass of the cross-profile intent filter , which is primarily used in Work Profile scenarios. This vulnerability can result in a local escalation of privilege without ...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-22418

The Google Android operating system is affected by an elevation of privilege vulnerability (CVE-2025-22418) caused by intent redirection in multiple locations, which can result in a confused deputy condition. This flaw allows an attacker to gain elevated privileges on the system without requiring...

CVE-2025-22418

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-35632

Name of the Vulnerable Software and Affected Versions: IntentForwarderActivity.java affected versions not specified Description: A logic error in the canForward function within IntentForwarderActivity.java may allow bypassing the cross-profile intent filter, commonly used in Work Profile scenario...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a logic error in the canForward function in IntentForwarderActivity.java, which could lead to a local elevation of privilege...