CVE-2026-0087

CVE-2026-0087 : The connected sources identify a logic error in Android’s DomainVerificationService.java (approvalLevelForDomainInternal) that could allow hijacking an arbitrary app link, enabling local privilege escalation without user interaction. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0087

In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary app link due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-10289

creationtimestamp| type| source ---|---|--- 2026-06-01 21:14:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnayqj54cb2n...

CVE-2026-45545

creationtimestamp| type| source ---|---|--- 2026-06-01 21:04:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnay6m25l42w 2026-06-05 03:08:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnj5uepyuj2f...

CVE-2026-45727

creationtimestamp| type| source ---|---|--- 2026-06-01 20:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnaxvnkvb32z...

CVE-2026-45729

creationtimestamp| type| source ---|---|--- 2026-06-01 20:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnax3vobbu2z 2026-07-22 17:00:04+00:00| seen| Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00 2026-07-23 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-10286

creationtimestamp| type| source ---|---|--- 2026-06-01 20:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnawsjmsdr26...

CVE-2026-8206

creationtimestamp| type| source ---|---|--- 2026-06-01 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86883 2026-06-01 23:00:14+00:00| seen| Telegram/WmCsGmCxw3llm8l2PpPL4TbSd7NmUffJbXR2OZgq87qhTE 2026-06-02 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnbr4mqu6h2j...

CVE-2026-9319

creationtimestamp| type| source ---|---|--- 2026-06-01 19:41:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatk6z5aa2k 2026-06-12 12:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27 2026-06-16 19:25:04+00:00| seen|...

CVE-2026-8644

creationtimestamp| type| source ---|---|--- 2026-06-01 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat7wh7co2w 2026-06-04 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mni7os6qr22z 2026-06-04 20:25:05+00:00| seen|...

CVE-2026-45132

creationtimestamp| type| source ---|---|--- 2026-06-01 19:22:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnasjc2rg427 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen|...

CVE-2026-45285

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includes an external member a person added via email address who does not have a Nextcloud account, the...

CVE-2026-45282

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can access attachments of link shares when knowing the share token, circumventing password protection or download...

CVE-2026-25276

creationtimestamp| type| source ---|---|--- 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260602 2026-06-02 01:32:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/116677923791061052 2026-06-02 17:37:06+00:00| seen|...

CVE-2026-45159

Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-e...

CVE-2026-10270

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpddebug.asp of the component API. The manipulation of the argument Time results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public...

CVE-2026-48839

creationtimestamp| type| source ---|---|--- 2026-06-01 17:03:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnakqabqqm2p...

CVE-2026-45285 Nextcloud: Hidden Public Link creation when sharing to a Team External Member

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includes an external member a person added via email address who does not have a Nextcloud account, the...

CVE-2026-45285

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includes an external member a person added via email address who does not have a Nextcloud account, the...