Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-23250

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/02 8:23 p.m.2 views

CVE-2025-8192

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...

6.9CVSS6.4AI score0.0005EPSS
Exploits0References1
NVD
NVD
added 2025/07/31 9:15 a.m.4 views

CVE-2025-8192

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...

6.9CVSS0.0005EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/31 8:24 a.m.4 views

CVE-2025-8192 Race condition in AndroidTV TvSettings

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...

6.9CVSS0.0005EPSS
Exploits0References1
CVE
CVE
added 2025/07/31 8:24 a.m.15 views

CVE-2025-8192

CVE-2025-8192 = TOCTOU race in TvSettings AppRestrictionsFragment.java on Android TV that allows starting an attacker supplied activity within the Settings context (system-uid), potentially enabling launchAnyWhere. Exploitation is local with low privileges and no user interaction, exploiting a wi...

6.9CVSS6.5AI score0.0005EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/07/31 8:24 a.m.2 views

CVE-2025-8192 Race condition in AndroidTV TvSettings

There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...

6.9CVSS6.8AI score0.0005EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.3 views

PT-2025-31495 · Unknown · Tvsettings

Name of the Vulnerable Software and Affected Versions: TvSettings affected versions not specified Description: A TOCTOU race condition exists in AppRestrictionsFragment.java that allows an attacker to start a malicious activity within the Settings application's system-uid context, leading to the...

6.9CVSS6.2AI score0.0005EPSS
Exploits0References5
Rows per page
Query Builder