Lucene search
K

6 matches found

CNVD
CNVD
added 2025/09/08 12:0 a.m.1 views

Google Android Information Disclosure Vulnerability (CNVD-2025-29709)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in the offerNetwork function in ConnectivityService.java. An attacker can exploit this vulnerability to obtain...

5.5CVSS6.1AI score0.00008EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/06 5:21 p.m.2 views

CVE-2025-26445

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.3AI score0.00008EPSS
Exploits0References1
OSV
OSV
added 2025/09/04 6:15 p.m.1 views

CVE-2025-26445

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00008EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/04 5:14 p.m.1 views

CVE-2025-26445

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4.8AI score0.00008EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 5:14 p.m.415 views

CVE-2025-26445

The CVE-2025-26445 entry concerns a vulnerability in Android’s ConnectivityService.java, specifically in offerNetwork, where a missing permission check can cause an information disclosure. The issue allows local information disclosure without additional execution privileges and does not require u...

5.5CVSS4.8AI score0.00008EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.2 views

PT-2025-36018

Name of the Vulnerable Software and Affected Versions: ConnectivityService affected versions not specified Description: A missing permission check in the offerNetwork function of ConnectivityService.java may lead to local information disclosure. Exploitation does not require user interaction or...

5.5CVSS5.7AI score0.00008EPSS
Exploits0References4
Rows per page
Query Builder