İçeriğe atla
Noroxi

CWE-926 · 150 kayıt

Improper Export of Android Application Components

Bu sınıftaki CVE’ler

150 kayıt

  • CVE-2026-107048
    39İzleyin

    An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107057
    39İzleyin

    An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.

    KritikCVSS 9,8İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107032
    36İzleyin

    Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, l

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107038
    36İzleyin

    Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107027
    36İzleyin

    Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107021
    36İzleyin

    Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attacker

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107040
    36İzleyin

    Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitra

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107043
    36İzleyin

    Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mecha

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107014
    36İzleyin

    Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user'

    KritikCVSS 9,1İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107019
    35İzleyin

    Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to cre

    YüksekCVSS 8,8İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-21055
    34İzleyin

    Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands wi

    YüksekCVSS 8,5İstismar yokEPSS %0

    samsung mobile · bixby10 Tem 2026

  • CVE-2026-81301
    34İzleyin

    Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

    YüksekCVSS 8,5İstismar yokEPSS %0

    ekia · file manager14 Eyl 2026

  • CVE-2025-5344
    34İzleyin

    Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application

    YüksekCVSS 8,5İstismar yokEPSS %0

    bluebird · com.bluebird.kiosk.launcher17 Tem 2025

  • CVE-2024-13917
    33İzleyin

    Intent Injection in Kruger&Matz AppLock application

    YüksekCVSS 8,3İstismar yokEPSS %0

    kruger&matz · com.pri.applock30 May 2025

  • CVE-2026-20990
    33İzleyin

    Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrar

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung · android16 Mar 2026

  • CVE-2026-20983
    33İzleyin

    Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitra

    YüksekCVSS 8,4İstismar yokEPSS %0

    samsung · android4 Şub 2026

  • CVE-2026-18994
    33İzleyin

    A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the

    YüksekCVSS 8,4İstismar yokEPSS %0

    lenovo · file manager application10 Eyl 2026

  • CVE-2025-68713
    32İzleyin

    An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9.

    YüksekCVSS 8,0İstismar yokEPSS %0

    15 Haz 2026

  • CVE-2026-54376
    32İzleyin

    VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking

    YüksekCVSS 8,2İstismar yokEPSS %0

    shenzhen shine industrial co., ltd. · vitafit4 Kas 2026

  • CVE-2021-25400
    31İzleyin

    Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.

    YüksekCVSS 7,8İstismar yokEPSS %0

    samsung · internet11 Haz 2021

  • CVE-2025-32347
    31İzleyin

    In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent.

    YüksekCVSS 7,8İstismar yokEPSS %0

    google · android4 Eyl 2025

  • CVE-2025-15464
    30İzleyin

    KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking

    YüksekCVSS 7,5İstismar yokEPSS %0

    yintibao · fun print8 Oca 2026

  • CVE-2026-107041
    30İzleyin

    Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrar

    YüksekCVSS 7,5İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107030
    30İzleyin

    Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (O

    YüksekCVSS 7,5İstismar yokEPSS %0

    29 Eki 2026

  • CVE-2026-107059
    30İzleyin

    An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker cont

    YüksekCVSS 7,5İstismar yokEPSS %0

    29 Eki 2026

Tüm zafiyet sınıfları