CVE-2026-45521

CVE-2026-45521 affects the openFile method in AppFuseBridge.java , where a missing permission check can lead to a local information disclosure . No additional execution privileges are required, and no user interaction is needed for exploitation. The vulnerability is referenced in the Android Secu...

CVE-2026-28652

CVE-2026-28652 affects Android devices, specifically the RangingServiceImpl.java file where a missing permission check in multiple functions enables a possible man-in-the-middle (MITM) attack. The vulnerability can lead to remote information disclosure without requiring additional execution privi...

EUVD-2026-73984

In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73970

In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28623

CVE-2026-28623 is a High -severity information disclosure vulnerability in Android's Bluetooth subsystem. The flaw resides in the writeToParcel method of BleRssiRangingCapabilities.java, where a missing permission check allows a local attacker to obtain the device's Bluetooth MAC address . No add...

CVE-2026-28611

CVE-2026-28611 affects Android's NFC service , specifically multiple functions within NfcService.java . A missing permission check enables silent payment session hijacking , leading to a local escalation of privilege with no additional execution privileges required and no user interaction needed ...

EUVD-2026-73961

In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73946

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2026-28582

CVE-2026-28582 is a High -severity vulnerability in the Android component ConfirmDeviceCredentialActivity.java . The root cause is a missing permission check in the onCreate method, allowing a local attacker to unauthorized access and modify device credentials without additional execution privile...

EUVD-2026-74046

In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0054

CVE-2026-0054 is a local information disclosure vulnerability in Android's WalletContextualLocationsService.kt , specifically in the isCallerAllowed method. A missing permission check allows an attacker to obtain wallet information without requiring additional execution privileges or user interac...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

CVE-2026-86495

In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...

CVE-2026-86495

JetBrains YouTrack versions before 2026.2.18687 are affected by missing permission checks that allow a low-privileged user to create knowledge base articles in projects they cannot otherwise access. This results in a HIGH integrity impact (CVSS 3.1 score 6.5 MEDIUM , vector AV:N/AC:L/PR:L/UI:N/S:...

EUVD-2026-72511

In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...

CVE-2026-86495

In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...

CVE-2026-20514

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

EUVD-2026-72207

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

CVE-2026-20514

CVE-2026-20514 affects MediaTek's Audio HAL , where a missing permission check can allow a local attacker with System privilege to disclose information without user interaction. The impact is limited to confidentiality (CVSS 3.1: 4.4, Medium). The vendor references Patch ID ALPS11087632 and Issue...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Unauthenticated Arbitrary File Creation Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including,...