Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/03/04 1:57 a.m.•12 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00098EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/02 7:16 p.m.•12 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.3CVSS5.9AI score0.00098EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/02 6:42 p.m.•9 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00098EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/03/02 6:42 p.m.•17 views

EUVD-2025-208213

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00098EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/02 6:42 p.m.•40 views

CVE-2025-48634

The CVE-2025-48634 entry involves Android’s WindowManagerService relayoutWindow where a missing permission check enables a local elevation-of-privilege (EoP) attack. The vulnerability can be exploited with no user interaction and does not require additional execution privileges. Connected documen...

8.4CVSS5.9AI score0.00098EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•2 views

CVE-2025-48634: Missing Authorization

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.8AI score0.00098EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•15 views

PT-2025-43507

Name of the Vulnerable Software and Affected Versions WindowManagerService.java affected versions not specified Description A potential tapjack attack exists in the relayoutWindow function of WindowManagerService.java due to a missing permission check. Successful exploitation could lead to local...

8.4CVSS5.8AI score0.00098EPSS
SaveExploits0References8
Rows per page
Query Builder