Lucene search
K

48 matches found

OSV
OSV
added 2026/03/02 7:16 p.m.2 views

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2026/03/02 7:16 p.m.4 views

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS0.00003EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/02 6:42 p.m.16 views

CVE-2026-0026

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.00003EPSS
Exploits0References1
CVE
CVE
added 2026/03/02 6:42 p.m.12 views

CVE-2026-0026

In CVE-2026-0026, a logic error in removePermission within PermissionManagerServiceImpl.java could allow overriding any system permission, enabling local privilege escalation. Exploit would require user interaction, but no exploitation details or specific in-the-wild data are provided in the docu...

7.8CVSS6.1AI score0.00003EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.1 views

PT-2026-22674

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.1AI score0.00003EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-25495

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00026EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-27008

Malicious code in bioql PyPI...

3.3CVSS6.4AI score0.00012EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/07 4:33 p.m.4 views

CVE-2025-26461

In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

3.3CVSS6.8AI score0.00012EPSS
Exploits0References1
OSV
OSV
added 2025/09/05 5:15 p.m.3 views

CVE-2025-26461

In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

3.3CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2025/09/05 5:15 p.m.2 views

CVE-2025-26461

In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

3.3CVSS0.00012EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/05 4:10 p.m.4 views

CVE-2025-26461

In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

0.00012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 4:10 p.m.1 views

CVE-2025-26461

In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

6.3AI score0.00012EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.3 views

PT-2025-36237

Name of the Vulnerable Software and Affected Versions: Permission Manager affected versions not specified Description: In Permission Manager, the microphone privacy indicator may remain activated even after a user attempts to close the application. This is due to a logic error in the code and cou...

3.3CVSS6.5AI score0.00012EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 3:9 a.m.5 views

CVE-2023-21327

In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.5AI score0.00026EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:9 a.m.2 views

CVE-2023-21341

In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:15 p.m.5 views

CVE-2021-1013

In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no...

5.5CVSS6AI score0.00014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/17 6:27 a.m.6 views

CVE-2021-26280 Permission bypass vulnerability in permission manager module

Locally installed application can bypass the permission check and perform system operations that require permission...

7.9CVSS7.2AI score0.00013EPSS
Exploits0References1
CVE
CVE
added 2024/12/17 6:27 a.m.64 views

CVE-2021-26280

CVE-2021-26280 (Vivo Permission manager module) is a locally exploitable vulnerability where a locally installed app can bypass permission checks and perform system operations that require permissions. The entry is supported by multiple sources (NVD, Red Hat, CVE listing) indicating a local attac...

7.9CVSS7.9AI score0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/17 6:27 a.m.15 views

CVE-2021-26280 Permission bypass vulnerability in permission manager module

Locally installed application can bypass the permission check and perform system operations that require permission...

7.9CVSS0.00013EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/17 12:0 a.m.1 views

vivo Permission manager module 安全漏洞

The vivo Permission manager module is a cell phone permission management module from the Chinese company Vivo. A security vulnerability exists in vivo Permission manager module, which originates from a locally installed application that can bypass permission checking and perform system operations...

7.9CVSS6.7AI score0.00013EPSS
Exploits0References1
Rows per page
Query Builder