CVE-2025-36895
- EPSS 0.02%
- Veröffentlicht 04.09.2025 04:51:36
- Zuletzt bearbeitet 05.09.2025 16:38:46
Information disclosure
CVE-2025-36894
- EPSS 0.19%
- Veröffentlicht 04.09.2025 04:51:22
- Zuletzt bearbeitet 05.09.2025 16:38:51
In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36893
- EPSS 0.01%
- Veröffentlicht 04.09.2025 04:51:06
- Zuletzt bearbeitet 05.09.2025 16:38:57
In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...
CVE-2025-36892
- EPSS 0.03%
- Veröffentlicht 04.09.2025 04:50:20
- Zuletzt bearbeitet 05.09.2025 16:39:03
Denial of service
CVE-2025-36891
- EPSS 0.02%
- Veröffentlicht 04.09.2025 04:49:47
- Zuletzt bearbeitet 05.09.2025 16:39:08
Elevation of privilege
CVE-2025-36890
- EPSS 0.03%
- Veröffentlicht 04.09.2025 04:49:12
- Zuletzt bearbeitet 29.09.2025 23:03:48
Elevation of Privilege
CVE-2025-26416
- EPSS 0.11%
- Veröffentlicht 02.09.2025 22:11:27
- Zuletzt bearbeitet 04.09.2025 16:37:27
In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed f...
- EPSS 0.01%
- Veröffentlicht 02.09.2025 22:11:26
- Zuletzt bearbeitet 04.09.2025 16:37:40
In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional exec...
CVE-2025-22439
- EPSS 0.01%
- Veröffentlicht 02.09.2025 22:11:25
- Zuletzt bearbeitet 04.09.2025 16:37:34
In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2025-22438
- EPSS 0.01%
- Veröffentlicht 02.09.2025 22:11:24
- Zuletzt bearbeitet 04.09.2025 16:37:48
In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.