#cwe-926

共收录 22 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布CRITICAL

Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and c...

CVE-2026-107032

Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an e

来源摘录 · NVD

漏洞预警2026-10-20 发布INFO

A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulati...

CVE-2026-113385

A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Cla

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-18 发布INFO

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plu...

CVE-2026-68928

Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.Term

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Androi...

CVE-2026-86701

Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its component

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-10 发布INFO

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a l...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distribute

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-07 发布INFO

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed. User ...

CVE-2026-20516

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denia

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is re...

CVE-2026-21081

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.

CVE-2026-21063

Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.

CVE-2026-21059

Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attac

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no...

CVE-2026-47361

BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no permission guard and a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Six Android App Widget configuration activities in the Datadog Android application are declared...

CVE-2026-44965

Six Android App Widget configuration activities in the Datadog Android application are declared android:exported="true"

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

The launcher activity AppActivity in the Datadog Android application is declared android:exported...

CVE-2026-47363

The launcher activity AppActivity in the Datadog Android application is declared android:exported="true" with launchMode

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including OAuth tokens) from...

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conv...

CVE-2026-47361

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission gu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShifts...

CVE-2026-44965

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such m...

CVE-2026-18604

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function D

历史摘要 · 未重新核验 · NVD

安全公告2026-08-03 发布INFO

In Telephony, there is a possible information disclosure due to a missing permission check. This...

CVE-2026-20470

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布MEDIUM

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileg...

CVE-2026-20470

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

来源摘录 · NVD

漏洞预警2026-06-23 发布INFO

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with...

CVE-2026-54318

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. The vulnerability allows untrusted applications (with no p...

CVE-2025-68713

An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. T

历史摘要 · 未重新核验 · NVD