CVE-2025-48536

In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...

CVE-2025-48536

In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...

EUVD-2019-6342

Malware in sbrugna...

EUVD-2015-3829

Malware in sbrugna...

EUVD-2015-5695

Malware in sbrugna...

EUVD-2017-18710

Malware in sbrugna...

EUVD-2019-18169

Malware in sbrugna...

EUVD-2012-3682

Malware in sbrugna...

EUVD-2016-1325

Malware in sbrugna...

EUVD-2019-6343

Malware in sbrugna...

EUVD-2016-7795

Malware in sbrugna...

EUVD-2022-41554

Malicious code in bioql PyPI...

EUVD-2022-47495

Malicious code in bioql PyPI...

EUVD-2023-32307

Malicious code in bioql PyPI...

EUVD-2023-38265

Malicious code in bioql PyPI...

EUVD-2022-25476

Malicious code in bioql PyPI...

CVE-2024-40821

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions...

CVE-2023-44121

The vulnerability is an intent redirection in LG ThinQ Service "com.lge.lms2" in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action...

CVE-2022-48516

Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality...

CVE-2021-39702

In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...