Skip to content
Noroxi

CWE-926 · 129 records

Improper Export of Android Application Components

CVEs in this class

129 records

  • CVE-2026-21055
    34Monitor

    Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands wi

    HighCVSS 8.5Proof of conceptEPSS 0%

    samsung mobile · bixbyJul 10, 2026

  • CVE-2026-81301
    34Monitor

    Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

    HighCVSS 8.5No exploitEPSS 0%

    ekia · file managerSep 14, 2026

  • CVE-2025-5344
    34Monitor

    Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application

    HighCVSS 8.5No exploitEPSS 0%

    bluebird · com.bluebird.kiosk.launcherJul 17, 2025

  • CVE-2024-13917
    33Monitor

    Intent Injection in Kruger&Matz AppLock application

    HighCVSS 8.3No exploitEPSS 0%

    kruger&matz · com.pri.applockMay 30, 2025

  • CVE-2026-20990
    33Monitor

    Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrar

    HighCVSS 8.4No exploitEPSS 0%

    samsung · androidMar 16, 2026

  • CVE-2026-20983
    33Monitor

    Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitra

    HighCVSS 8.4No exploitEPSS 0%

    samsung · androidFeb 4, 2026

  • CVE-2026-18994
    33Monitor

    A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the

    HighCVSS 8.4No exploitEPSS 0%

    lenovo · file manager applicationSep 10, 2026

  • CVE-2025-68713
    32Monitor

    An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9.

    HighCVSS 8.0No exploitEPSS 0%

    Jun 15, 2026

  • CVE-2021-25400
    31Monitor

    Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.

    HighCVSS 7.8No exploitEPSS 0%

    samsung · internetJun 11, 2021

  • CVE-2025-32347
    31Monitor

    In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent.

    HighCVSS 7.8No exploitEPSS 0%

    google · androidSep 4, 2025

  • CVE-2025-15464
    30Monitor

    KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking

    HighCVSS 7.5No exploitEPSS 0%

    yintibao · fun printJan 8, 2026

  • CVE-2026-45528
    29Monitor

    In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.

    HighCVSS 7.3No exploitEPSS 0%

    google · androidSep 8, 2026

  • CVE-2026-54318
    28Monitor

    Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location

    HighCVSS 7.1No exploitEPSS 0%

    home-assistant · home assistant companionJun 23, 2026

  • CVE-2025-21080
    28Monitor

    Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access fil

    HighCVSS 7.1No exploitEPSS 0%

    samsung · androidDec 1, 2025

  • CVE-2021-25388
    28Monitor

    Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.

    HighCVSS 7.1No exploitEPSS 0%

    google · androidJun 11, 2021

  • CVE-2026-57848
    27Monitor

    Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation

    MediumCVSS 6.8No exploitEPSS 0%

    stoatchat · stoat for androidJul 18, 2026

  • CVE-2026-21063
    27Monitor

    Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock fu

    MediumCVSS 6.8No exploitEPSS 0%

    samsung · androidAug 10, 2026

  • CVE-2024-13915
    27Monitor

    Unrestricted Access to Exported Service in com.pri.factorytest

    MediumCVSS 6.9No exploitEPSS 0%

    ulefone · com.pri.factorytestMay 30, 2025

  • CVE-2024-13916
    27Monitor

    Exposure of Applications' Encryption PINs in Kruger&Matz AppLock

    MediumCVSS 6.9No exploitEPSS 0%

    kruger&matz · com.pri.applockMay 30, 2025

  • CVE-2026-21054
    27Monitor

    Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.

    MediumCVSS 6.9No exploitEPSS 0%

    samsung mobile · inputsharingJul 10, 2026

  • CVE-2025-20897
    27Monitor

    Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows

    MediumCVSS 6.8No exploitEPSS 0%

    samsung mobile · secure folderFeb 4, 2025

  • CVE-2026-3291
    27Monitor

    Samsung Print Service Plugin – Potential Information Disclosure

    MediumCVSS 6.9No exploitEPSS 0%

    hp · samsung print service pluginMay 6, 2026

  • CVE-2026-21059
    27Monitor

    Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file

    MediumCVSS 6.9No exploitEPSS 0%

    samsung · androidAug 10, 2026

  • CVE-2026-21127
    27Monitor

    Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive d

    MediumCVSS 6.9No exploitEPSS 0%

    samsung mobile · samsung accountOct 12, 2026

  • CVE-2026-21108
    27Monitor

    Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive infor

    MediumCVSS 6.9No exploitEPSS 0%

    samsung · bixbySep 9, 2026

All vulnerability classes