İçeriğe atla
Noroxi

CWE-926 · 127 kayıt

Improper Export of Android Application Components

Bu sınıftaki CVE’ler

127 kayıt

  • CVE-2026-21055
    34İzleyin

    Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands wi

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    samsung mobile · bixby10 Tem 2026

  • CVE-2026-81301
    34İzleyin

    Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

    YüksekCVSS 8,5İstismar yokEPSS %0

    ekia · file manager14 Eyl 2026

  • CVE-2025-5344
    34İzleyin

    Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application

    YüksekCVSS 8,5İstismar yokEPSS %0

    bluebird · com.bluebird.kiosk.launcher17 Tem 2025

  • CVE-2024-13917
    33İzleyin

    Intent Injection in Kruger&Matz AppLock application

    YüksekCVSS 8,3İstismar yokEPSS %0

    kruger&matz · com.pri.applock30 May 2025

  • CVE-2026-20990
    33İzleyin

    Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrar

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung · android16 Mar 2026

  • CVE-2026-20983
    33İzleyin

    Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitra

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung · android4 Şub 2026

  • CVE-2026-18994
    33İzleyin

    A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the

    YüksekCVSS 8,4İstismar yokEPSS %0

    lenovo · file manager application10 Eyl 2026

  • CVE-2025-68713
    32İzleyin

    An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9.

    YüksekCVSS 8,0İstismar yokEPSS %0

    15 Haz 2026

  • CVE-2021-25400
    31İzleyin

    Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.

    YüksekCVSS 7,8İstismar yokEPSS %0

    samsung · internet11 Haz 2021

  • CVE-2025-32347
    31İzleyin

    In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-15464
    30İzleyin

    KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking

    YüksekCVSS 7,5İstismar yokEPSS %1

    yintibao · fun print8 Oca 2026

  • CVE-2026-45528
    29İzleyin

    In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.

    YüksekCVSS 7,3İstismar yokEPSS %0

    google · android8 Eyl 2026

  • CVE-2026-54318
    28İzleyin

    Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location

    YüksekCVSS 7,1İstismar yokEPSS %0

    home-assistant · home assistant companion23 Haz 2026

  • CVE-2025-21080
    28İzleyin

    Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access fil

    YüksekCVSS 7,1İstismar yokEPSS %0

    samsung · android1 Ara 2025

  • CVE-2021-25388
    28İzleyin

    Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.

    YüksekCVSS 7,1İstismar yokEPSS %0

    google · android11 Haz 2021

  • CVE-2026-57848
    27İzleyin

    Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation

    OrtaCVSS 6,8İstismar yokEPSS %0

    stoatchat · stoat for android18 Tem 2026

  • CVE-2026-21063
    27İzleyin

    Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock fu

    OrtaCVSS 6,8İstismar yokEPSS %0

    samsung · android10 Ağu 2026

  • CVE-2024-13915
    27İzleyin

    Unrestricted Access to Exported Service in com.pri.factorytest

    OrtaCVSS 6,9İstismar yokEPSS %0

    ulefone · com.pri.factorytest30 May 2025

  • CVE-2024-13916
    27İzleyin

    Exposure of Applications' Encryption PINs in Kruger&Matz AppLock

    OrtaCVSS 6,9İstismar yokEPSS %0

    kruger&matz · com.pri.applock30 May 2025

  • CVE-2025-20897
    27İzleyin

    Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0 in Android 12 allows

    OrtaCVSS 6,8İstismar yokEPSS %0

    samsung mobile · secure folder4 Şub 2025

  • CVE-2026-21054
    27İzleyin

    Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.

    OrtaCVSS 6,9İstismar yokEPSS %0

    samsung mobile · inputsharing10 Tem 2026

  • CVE-2026-3291
    27İzleyin

    Samsung Print Service Plugin – Potential Information Disclosure

    OrtaCVSS 6,9İstismar yokEPSS %0

    hp · samsung print service plugin6 May 2026

  • CVE-2026-21059
    27İzleyin

    Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file

    OrtaCVSS 6,9İstismar yokEPSS %0

    samsung · android10 Ağu 2026

  • CVE-2026-21033
    27İzleyin

    Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local att

    OrtaCVSS 6,9İstismar yokEPSS %0

    samsung · assistant5 Haz 2026

  • CVE-2026-21032
    27İzleyin

    Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attac

    OrtaCVSS 6,9İstismar yokEPSS %0

    samsung · assistant5 Haz 2026

Tüm zafiyet sınıfları