4 matches found
CVE-2026-49190: Improper Neutralization of Special Elements used in an OS Command
The system fails to evaluate instructional permissions over multiple internal operation codes opcodes, permitting unauthorized application installations or command executions...
9.4CVSS5.8AI score0.00808EPSS
SaveExploits0References3
CVE-2025-22442: Concurrent Execution using Shared Resource with Improper Synchronization
In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...
7CVSS5.8AI score0.00067EPSS
SaveExploits0References1
20