CVE-2026-112938

"StrictSoftFileLock" and "AsyncStrictSoftFileLock" check ".filelock" the coordination directory that holds the lock's state with one "lstat" call on its name. "lstat" reports what a name is without following a symbolic link a file that redirects to another path. After that check, the code reaches...

CVE-2023-21281

In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead to local escalation of privilege across users with no additional execution privileges needed. User interaction is not needed for...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a logic error in the multiple method code of KeyguardViewMediator.java, where the screen may not lock after a timeout. An attacker can...

iOS Data Compromise

The vulnerability of the Local Authentication component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of protected information by...