{"id":"CVE-2019-9428","aliases":["EUVD-2019-18802","GHSA-4hrx-pcv2-635j"],"status":"published","title":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This...","description":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110150807","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00856,"percentile":0.58698,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2019-09-27T18:05:18Z","modified":"2026-06-17T02:43:43Z","products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-10","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9428"},{"url":"https://github.com/advisories/GHSA-4hrx-pcv2-635j"}],"sources":{"cve":[{"id":"CVE-2019-9428","description":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110150807","status":"published","published":"2019-09-27T18:05:18Z","modified":"2024-08-04T21:46:30.563Z","updated_at":"2026-11-02T14:20:20.397093Z"}],"euvd":[{"id":"EUVD-2019-18802","description":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110150807","status":"published","published":"2019-09-27T18:05:18Z","modified":"2024-08-04T21:46:30Z","updated_at":"2026-11-03T03:06:38.777229Z"}],"ghsa":[{"id":"GHSA-4hrx-pcv2-635j","title":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This...","description":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110150807","status":"published","published":"2022-05-24T16:57:26Z","modified":"2023-01-28T05:07:24Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:44:31.117774Z"}],"nvd":[{"id":"CVE-2019-9428","description":"In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110150807","status":"published","published":"2019-09-27T19:15:28.56Z","modified":"2026-06-17T02:43:43.257Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:30.039477Z"}]}}