CWE-926: Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- shenzhen shine industrial co., ltd. vitafit VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking 8.2 High
- No product listed An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of... 7.5 High
- No product listed An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a... 9.8 Critical
- No product listed Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows... 7.5 High
- No product listed An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101... 9.8 Critical
- No product listed A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast... 5.3 Medium
- No product listed Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily... 9.1 Critical
- No product listed Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode... 7.5 High
- No product listed Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to... 9.1 Critical
- No product listed Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized... 9.1 Critical
- No product listed Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized... 5.1 Medium
- No product listed Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode... 6.5 Medium
- No product listed Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized... 9.1 Critical
- No product listed Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows... 7.5 High
- No product listed Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized... 9.1 Critical
- No product listed Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows... 7.5 High
- No product listed Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo... 9.1 Critical
- No product listed Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2... 8.8 High
- No product listed Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized... 9.1 Critical
- leedroid labs shortcutter 2 app LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components 4.8 Medium
- samsung mobile account Improper export of android application components in Samsung Account prior to version 15.7.01.1... 6.9 Medium
- acode-foundation acode Acode: Exported TerminalService (bundled terminal plugin) lets any installed app execute arbitrary shell commands as Acode 8.6 High
- ntt docomo business, inc. manabipocket for parents Android application "ManabiPocket for Parents" contains an improper access control vulnerability... 1.8 Low
- ekia file manager Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access 8.5 High
- lenovo file manager application A potential improper authorization vulnerability was reported in the Lenovo File Manager Android... 8.4 High
- samsung visual voicemail Improper export of android application components in Visual Voicemail prior to version 20.1.00.05... 4.8 Medium
- samsung bixby, samsung mobile bixby touch +1 more Improper export of android application components in Bixby Touch prior to version 4.3.01.17... 6.9 Medium
- mediatek, inc. mediatek chipset In MiracastService, there is a possible escalation of privilege due to a confused deputy. This... 5.5 Medium
- google android In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere... 7.3 High
- samsung mobile samsungpassautofill Improper export of android application components in SamsungPassAutofill prior to version 5.2.10... 5.1 Medium
- samsung android, samsung mobile devices +1 more Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1... 6.8 Medium
- samsung android, samsung mobile devices +1 more Improper export of android application components in Samsung Contacts prior to SMR Aug-2026... 6.9 Medium
- datadog android app The launcher activity AppActivity in the Datadog Android application is declared android:exported... 6.3 Medium
- datadog android app Six Android App Widget configuration activities in the Datadog Android application are declared... 5.5 Medium
- datadog android app BubbleChatActivity in the Datadog Android application is declared android:exported="true" with no... 6.4 Medium
- textplus text message and call app textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application components 4.8 Medium
- mediatek, inc. mediatek chipset In Telephony, there is a possible information disclosure due to a missing permission check. This... 6.2 Medium
- stoatchat stoat for android Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation 6.8 Medium
- asus router app An Improper Export of Android Application Components vulnerability in ASUS Router App allows a... 6.0 Medium
- home-assistant core, home assistant companion +1 more Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location 7.1 High
- No product listed An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android... 8.0 High
- fortinet fortitokenandroid, fortitoken mobile +1 more A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6... 5.0 Medium
- hp samsung print service plugin Samsung Print Service Plugin – Potential Information Disclosure 6.9 Medium
- yintibao fun print mobile, fun print +1 more KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking 7.5 High
- yalantis ucrop Yalantis uCrop AndroidManifest.xml UCropActivity improper export of android application components 4.8 Medium
- sktlab mukbee app SKTLab Mukbee App com.dw.android.mukbee AndroidManifest.xml improper export of android application components 4.8 Medium
- webull investing & trading app Webull Investing & Trading App AndroidManifest.xml improper export of android application components 4.8 Medium
- ooma office business phone app Ooma Office Business Phone App com.ooma.office2 improper export of android application components 4.8 Medium
- intsig camscanner app intsig CamScanner App com.intsig.camscanner AndroidManifest.xml improper export of android application components 4.8 Medium
- creality cloud app Creality Cloud App com.cxsw.sdprinter AndroidManifest.xml improper export of android application components 4.8 Medium
- Show olderLoading…