CVE-2026-21081 | | | 2026-08-10 | Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User… |
CVE-2026-21063 | | | 2026-08-10 | Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function. |
CVE-2026-21059 | | | 2026-08-10 | Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contac… |
CVE-2026-47363 | Medium | 6.3 | 2026-08-07 | In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including… |
CVE-2026-47361 | Medium | 6.4 | 2026-08-07 | In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a ca… |
CVE-2026-44965 | Medium | 5.5 | 2026-08-07 | In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActi… |
CVE-2026-18604 | Medium | 5.3 | 2026-08-03 | A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogi… |
CVE-2026-20470 | Medium | 6.2 | 2026-08-03 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2026-57848 | Medium | 5.5 | 2026-07-18 | Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component (reachable to any process on the device via the android.intent.action.SEND in… |
CVE-2026-12960 | | | 2026-07-03 | An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Int… |
CVE-2026-54318 | High | 7.1 | 2026-06-23 | Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceive… |
CVE-2025-68713 | High | 8.0 | 2026-06-15 | An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. The vulnerability allows untrusted appli… |
CVE-2026-44279 | Medium | 5.5 | 2026-05-12 | An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTok… |
CVE-2026-3291 | Medium | 5.5 | 2026-05-06 | Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devic… |
CVE-2025-15464 | High | 7.5 | 2026-01-08 | Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls. |
CVE-2025-14517 | Medium | 5.3 | 2025-12-11 | A vulnerability was determined in Yalantis uCrop 2.2.11. This affects the function UCropActivity of the file AndroidManifest.xml. Executing manipulation can l… |
CVE-2025-10722 | Medium | 5.3 | 2025-09-19 | A vulnerability was detected in SKTLab Mukbee App 1.01.196 on Android. This affects an unknown function of the file AndroidManifest.xml of the component com.dw… |
CVE-2025-10721 | Medium | 5.3 | 2025-09-19 | A vulnerability was determined in Webull Investing & Trading App 11.2.5.63 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml… |
CVE-2025-10718 | Medium | 5.3 | 2025-09-19 | A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipul… |
CVE-2025-10717 | Medium | 5.3 | 2025-09-19 | A vulnerability has been found in intsig CamScanner App 6.91.1.5.250711 on Android. Affected by this issue is some unknown functionality of the file AndroidMan… |
CVE-2025-10716 | Medium | 5.3 | 2025-09-19 | A flaw has been found in Creality Cloud App up to 6.1.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml… |
CVE-2025-10715 | Medium | 5.3 | 2025-09-19 | A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an unknown function of the file AndroidMan… |
CVE-2025-10195 | Medium | 5.3 | 2025-09-10 | A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.do… |
CVE-2025-5500 | Medium | 5.3 | 2025-09-09 | A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xi… |
CVE-2025-32347 | High | 7.8 | 2025-09-04 | In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent. This could lead to l… |
CVE-2025-9695 | Medium | 5.3 | 2025-08-30 | A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file Andro… |
CVE-2025-9677 | Medium | 5.3 | 2025-08-29 | A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown function of the file AndroidManifest.xml of t… |
CVE-2025-9676 | Medium | 5.3 | 2025-08-29 | A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft… |
CVE-2025-9675 | Medium | 5.3 | 2025-08-29 | A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component co… |
CVE-2025-9674 | Medium | 5.3 | 2025-08-29 | A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml… |
CVE-2025-9673 | Medium | 5.3 | 2025-08-29 | A vulnerability was detected in Kakao 헤이카카오 Hey Kakao App up to 2.17.4 on Android. Affected by this vulnerability is an unknown functionality of the file Andro… |
CVE-2025-9672 | Medium | 5.3 | 2025-08-29 | A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file AndroidManifest.xml of the component de… |
CVE-2025-9671 | Medium | 5.3 | 2025-08-29 | A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com… |
CVE-2025-9135 | Medium | 5.3 | 2025-08-19 | A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted ele… |
CVE-2025-9134 | Medium | 5.3 | 2025-08-19 | A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android. The affected element is an unknown function of the file An… |
CVE-2025-9102 | Medium | 5.3 | 2025-08-18 | A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown function of the file AndroidManifest.xml o… |
CVE-2025-9098 | Medium | 5.3 | 2025-08-18 | A vulnerability was determined in Elseplus File Recovery App 4.4.21 on Android. Affected by this issue is some unknown functionality of the file AndroidManifes… |
CVE-2025-9097 | Medium | 5.3 | 2025-08-18 | A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vulnerability is an unknown functionality… |
CVE-2025-9093 | Medium | 5.3 | 2025-08-17 | A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com… |
CVE-2025-8745 | Medium | 5.3 | 2025-08-09 | A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the f… |
CVE-2025-8707 | Medium | 5.3 | 2025-08-08 | A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unknown part of the file AndroidManifest.xm… |
CVE-2025-8524 | Medium | 5.3 | 2025-08-04 | A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issue is some unknown functionality of the… |
CVE-2025-8523 | Medium | 5.3 | 2025-08-04 | A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected by this vulnerability is an unknown fu… |
CVE-2025-8513 | Medium | 5.3 | 2025-08-03 | A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifes… |
CVE-2025-8512 | Medium | 5.3 | 2025-08-03 | A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of th… |
CVE-2025-8275 | Medium | 5.3 | 2025-07-28 | A vulnerability, which was classified as problematic, has been found in bsc Peru Cocktails App 1.0.0 on Android. Affected by this issue is some unknown functio… |
CVE-2025-8258 | Medium | 5.3 | 2025-07-28 | A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unkno… |
CVE-2025-8257 | Medium | 5.3 | 2025-07-28 | A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functional… |
CVE-2025-8210 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affected is an unknown function of the file An… |
CVE-2025-8207 | Medium | 5.3 | 2025-07-26 | A vulnerability was found in Canara ai1 Mobile Banking App 3.6.23 on Android and classified as problematic. This issue affects some unknown processing of the f… |
CVE-2025-7940 | Medium | 5.3 | 2025-07-21 | A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown f… |
CVE-2025-7893 | Medium | 5.3 | 2025-07-20 | A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidMa… |
CVE-2025-7892 | Medium | 5.3 | 2025-07-20 | A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of t… |
CVE-2025-7891 | Medium | 5.3 | 2025-07-20 | A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown f… |
CVE-2025-7890 | Medium | 5.3 | 2025-07-20 | A vulnerability was found in Dunamu StockPlus App up to 7.62.10 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown f… |
CVE-2025-7889 | Medium | 5.3 | 2025-07-20 | A vulnerability was found in CallApp Caller ID App up to 2.0.4 on Android. It has been classified as problematic. Affected is an unknown function of the file A… |
CVE-2025-5346 | | | 2025-07-17 | Bluebird devices contain a pre-loaded barcode scanner application. This application exposes an unsecured broadcast receiver "kr.co.bluebird.android.bbsettings… |
CVE-2025-5345 | | | 2025-07-17 | Bluebird devices contain a pre-loaded file manager application. This application exposes an unsecured service provider "com.bluebird.system.koreanpost.IsdcardR… |
CVE-2025-5344 | | | 2025-07-17 | Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.bluebird.kiosk.launcher.IpartnerKioskRemot… |
CVE-2024-13917 | | | 2025-05-30 | An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by u… |
CVE-2024-13916 | | | 2025-05-30 | An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by u… |
CVE-2024-13915 | | | 2025-05-30 | Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing pr… |
CVE-2025-27599 | Medium | 6.5 | 2025-04-18 | Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a webpage, or a locally installed malicio… |
CVE-2025-20934 | Medium | 5.5 | 2025-04-08 | Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege. |
CVE-2024-36437 | Medium | 6.5 | 2025-02-03 | The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (with no permissions)… |
CVE-2024-6051 | | | 2024-09-30 | Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnera… |
CVE-2024-3479 | Low | 2.8 | 2024-05-03 |
An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow… |
CVE-2023-41823 | Medium | 4.4 | 2024-05-03 |
An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activitie… |
CVE-2023-41822 | Medium | 4.8 | 2024-05-03 |
An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS com… |
CVE-2023-41821 | Medium | 5.0 | 2024-05-03 |
A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information.
|
CVE-2023-41816 | Medium | 5.0 | 2024-05-03 |
An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database.
|
CVE-2024-27086 | Low | 3.9 | 2024-04-16 | The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET applications targeting Xamarin Android and .NET Android (e.g., MAUI) u… |
CVE-2021-4438 | Medium | 5.3 | 2024-04-07 | A vulnerability, which was classified as critical, has been found in kyivstarteam react-native-sms-user-consent up to 1.1.4 on Android. Affected by this issue… |
CVE-2023-41829 | Medium | 5.0 | 2024-03-04 | An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files withou… |
CVE-2023-41827 | Medium | 5.1 | 2024-03-04 | An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based m… |
CVE-2023-41960 | High | 7.1 | 2023-10-25 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent applicati… |
CVE-2023-44129 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.an… |
CVE-2023-44121 | Medium | 5.0 | 2023-09-27 | The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This… |
CVE-2023-21486 | Medium | 5.3 | 2023-05-04 | Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to… |
CVE-2023-21485 | Medium | 5.3 | 2023-05-04 | Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to… |
CVE-2023-20962 | Medium | 5.5 | 2023-03-24 | In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIn… |
CVE-2022-24929 | Medium | 4.1 | 2022-03-10 | Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication. |
CVE-2021-25527 | Low | 3.8 | 2021-12-08 | Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Rech… |
CVE-2021-25526 | Medium | 4.0 | 2021-12-08 | Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action. |
CVE-2021-25400 | High | 7.8 | 2021-06-11 | Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action. |
CVE-2021-25397 | Medium | 6.8 | 2021-06-11 | An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process vi… |
CVE-2021-25391 | Medium | 4.0 | 2021-06-11 | Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action. |
CVE-2021-25390 | Medium | 4.0 | 2021-06-11 | Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action. |
CVE-2021-25388 | High | 7.1 | 2021-06-11 | Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app. |
CVE-2021-25379 | Medium | 4.0 | 2021-04-09 | Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action. |