Lucene search
+L

619 matches found

Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•7 views

PT-2025-36824

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An untrusted pointer dereference in Windows Desktop Window Manager DWM can allow a locally authenticated attacker to gain elevated privileges. This issue allows attackers to affect the...

7.8CVSS6.2AI score0.00457EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/09/06 5:21 p.m.•13 views

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS6.7AI score0.0009EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/04 10:32 p.m.•10 views

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00091EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/04 6:15 p.m.•14 views

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS5.9AI score0.0009EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/04 6:15 p.m.•16 views

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS0.0009EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/04 5:11 p.m.•449 views

CVE-2025-26422

A security vulnerability exists in the WindowManagerService.java component of the Android operating system. The flaw is caused by a missing permission check , which allows for the execution of dumpsys without the required permissions. This could lead to a local escalation of privilege without nec...

4CVSS6.2AI score0.0009EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/09/04 5:11 p.m.•24 views

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/04 5:11 p.m.•6 views

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.0009EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/09/04 5:11 p.m.•9 views

CVE-2025-26422

In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS5.7AI score0.0009EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/09/02 11:15 p.m.•13 views

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00091EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/09/02 10:11 p.m.•9 views

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.7AI score0.00091EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/02 10:11 p.m.•4 views

CVE-2025-22434

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•10 views

PT-2025-35633

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error exists in the handleKeyGestureEvent function of PhoneWindowManager.java that may allow a lock screen bypass. Successful exploitation could lead to local privilege escalation...

7.8CVSS6AI score0.00091EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2017-7875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while...

9.8CVSS8.2AI score0.02266EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/08/20 12:00 a.m.•22 views

The vulnerability of desktop window managers in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of desktop window managers in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.00447EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/14 6:23 p.m.•6 views

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

7.8CVSS8AI score0.00447EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/12 6:15 p.m.•5 views

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

7.8CVSS0.00447EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 6:15 p.m.•7 views

CVE-2025-53152

Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally...

7.8CVSS5.9AI score0.00447EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 6:15 p.m.•8 views

CVE-2025-50153

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00437EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/12 6:15 p.m.•6 views

CVE-2025-50153

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00437EPSS
SaveExploits0References1
Rows per page
Query Builder