CVE-2025-22415

CVE-2025-22415 affects Android Wear OS devices and is described as a local elevation-of-privilege in the android_app component of Android.bp, where there is a path to launch any activity as a system user without user interaction. The root cause is tied to the System component behavior in Wear OS/...

CVE-2025-48542

In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48542

In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32345

In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user's deceptive app scanning setting due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2025-32323

CVE-2025-32323: In Shared.java getCallingAppName, input validation allows deceptive permission-popup text to trick users into granting file access. This enables local elevation of privilege, with no additional execution privileges and no user interaction required. Affected: Android framework code...

PT-2025-36064

Name of the Vulnerable Software and Affected Versions: AccountManagerService.java affected versions not specified Description: Multiple functions within AccountManagerService.java are susceptible to a permanent denial of service due to resource exhaustion. Exploitation of this issue can lead to a...

PT-2025-36071

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A path traversal error exists in testGrantSlicePermission of SliceManagerTest.java, potentially leading to a permanent denial of service. Exploitation require...

PT-2025-36021

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in IInputMethodSessionWrapper.java within the Android operating system. An untrusted application may inject key and motion events into the default Input Method Editor IME due ...

CVE-2025-9731

A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etcro/shadow of the component Administrative Interface. This manipulation causes hard-coded credentials. It is possible to launch the attack on the local host. The attack's complexity...

CVE-2025-9815

CVE-2025-9815 affects alaneuler batteryKid up to 2.1 on macOS. The vulnerability is in PrivilegeHelper/PrivilegeHelper.swift within the NSXPCListener component, where a manipulation causes missing authentication. This enables a local attack on the host, with the exploit publicly available. Remedi...

ASB-A-414603411

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-273501008

In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2025-9301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx...

CVE-2025-9731 Tenda AC9 Administrative shadow hard-coded credentials

A vulnerability was determined in Tenda AC9 15.03.05.19. The impacted element is an unknown function of the file /etcro/shadow of the component Administrative Interface. This manipulation causes hard-coded credentials. It is possible to launch the attack on the local host. The attack's complexity...

CVE-2025-9695

CVE-2025-9695 affects GalleryVault Gallery Vault App for Android up to version 4.5.2. The issue arises from an improperly exported AndroidManifest.xml in the component com.thinkyeah.galleryvault, enabling a local-execution path. The vulnerability could lead to exposure of confidential data on the...

CVE-2010-10017

WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler SEH records and execute arbitrary code. Exploitation...

CVE-2010-10017 WM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U File

WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler SEH records and execute arbitrary code. Exploitation...

Linux Distros Unpatched Vulnerability : CVE-2025-5200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function...

CVE-2025-9675

The CVE-2025-9675 entry affects the Voice Changer App up to version 1.1.0 and specifically the AndroidManifest.xml handling in the component com.tuyangkeji.changevoice. The underlying issue is improper export of Android application components due to some unknown processing of that manifest file, ...

CVE-2025-9672

A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file AndroidManifest.xml of the component de.hafas.android.rejseplanen. The manipulation leads to improper export of android application components. The attack needs to be performed...