Platform
Android
6,158 known vulnerabilities.
6,158 results · Feed
-
High 7.5
Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live da…
-
Medium 5.3
Cross-request disclosure of CentralAuth cookies in Wikipedia Android App
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This issue affects Wikipedia Android App: main.
-
Low 2.4
Smartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key, which may allow an at…
-
Critical 9.3
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page…
-
Medium 6.2
Adobe Connect | Improper Certificate Validation (CWE-295)
Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user …
-
High 8.6
Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories …
-
Critical 9.3
Adobe Connect | Improper Input Validation (CWE-20)
Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requir…
-
Critical 9.9
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this v…
-
Medium 6.1
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page…
-
Critical 9.3
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. E…
-
Critical 9.3
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page…
-
Critical 9.3
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page…
-
Medium 6.4
AppMySite <= 3.15.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via save_ams_license_key AJAX Handler
The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via save_ams_license_key AJAX Handler in all versions up to, and including, 3.15.3 due to insufficie…
-
Medium 6.2
Verizon Cloud for Android < 26.7.10 Path Traversal via OneTouchUploadActivity
Verizon Cloud for Android (com.vcast.mediamanager) before 26.7.10 contains a path traversal vulnerability that allows co-resident malicious applications to write attacker-controlled bytes outside the intended staging directory by supplying a crafted _display_…
-
Medium 6.7
In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This c…
-
Medium 6.7
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. T…
-
High 7.8
In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. T…
-
Medium 6.7
In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of …
-
Medium 6.7
In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the co…
-
Medium 6.7
In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could…
-
Medium 6.7
In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could…
-
High 7.8
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to…
-
Medium 6.7
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. T…
-
High 7.0
In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This coul…
-
Medium 6.2
In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This…
-
High 7.0
In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalat…
-
Medium 6.7
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to …
-
High 7.0
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation …
-
Medium 4.4
In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to l…
-
Medium 6.7
In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validatio…
-
Medium 6.7
In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to loc…
-
High 8.8
In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. T…
-
High 8.8CVE-2026-58704 Exploited
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (p…
KEV Sep 16, 2026 -
High 7.0
In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could …
-
High 8.4
In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This…
-
Medium 6.7
In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This coul…
-
High 7.8
In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing boun…
-
High 8.4
In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to l…
-
High 8.8
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead t…
-
High 8.4
In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. Th…