Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/08 7:17 p.m.•10 views

CVE-2026-28671

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS0.0007EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 6:05 p.m.•16 views

CVE-2026-28671

A race condition vulnerability exists in the updateInternal method of MediaProvider.java within the Media Provider component. This flaw could lead to local information disclosure , allowing an attacker to expose the contents of files without requiring additional execution privileges or user inter...

3.3CVSS5.9AI score0.0007EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/08 6:05 p.m.•11 views

CVE-2026-28671

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.0007EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 6:05 p.m.•14 views

EUVD-2026-73996

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score0.0007EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 6:05 p.m.•33 views

CVE-2026-28671

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0007EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88234

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score0.0007EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•1 views

CVE-2024-43089: Missing Authorization

In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References1
Rows per page
Query Builder