Weakness (CWE)

CWE-926: Improper Export of Android Application Components

Variant Incomplete

The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

How to prevent it (4 mitigations)

Build and Compilation

If they do not need to be shared by other applications, explicitly mark components with android:exported="false" in the application manifest.
Build and Compilation

If you only intend to use exported components between related apps under your control, use android:protectionLevel="signature" in the xml manifest to restrict access to applications signed by you.
Build and Compilation, Architecture and Design

Limit Content Provider permissions (read/write) as appropriate.
Build and Compilation, Architecture and Design

Limit Content Provider permissions (read/write) as appropriate.

Source: MITRE CWE-926

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.5

CVE-2026-20516 Public exploit

In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local deni…

MediaTek MediaTek chipset

Sep 7, 2026
Medium 6.0

CVE-2026-12960 Public exploit

An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application …

ASUS Router app

Jul 3, 2026
Medium 5.3

CVE-2025-7892 Public exploit

IDnow App de.idnow AndroidManifest.xml improper export of android application components

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. …

Jul 20, 2025
Medium 6.5

CVE-2024-36437 Public exploit

The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any inst…

Feb 3, 2025