CWE-926: Improper Export of Android Application Components
The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- azuread microsoft-authentication-library-for-dotnetMSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service3.9 Low
- kyivstarteam react-native-sms-user-consent, kyivstar react native sms user consent +1 morekyivstarteam react-native-sms-user-consent SmsUserConsentModule.kt registerReceiver improper export of android application components5.3 Medium
- motorola phonesAn improper export vulnerability was reported in the Motorola Carrier Services application that...5.0 Medium
- motorola phonesAn improper export vulnerability was reported in the Motorola OTA update application, that could...5.1 Medium
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe vulnerability allows an unprivileged(untrusted) third-party application to interact with a...7.1 High
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreMessaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity3.6 Low
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreLG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere5.0 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components vulnerability in...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components vulnerability in ImagePreviewActivity in Call...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components vulnerability in VideoPreviewActivity in Call...5.3 Medium
- google androidIn getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start...5.5 Medium
- google android, samsung mobile devices +1 moreUnprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the...4.1 Medium
- samsung payImproper export of Android application components vulnerability in Samsung Pay (India only) prior...3.8 Low
- samsung blockchain walletIntent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows...4.0 Medium
- samsung internet, samsung mobile samsug internet +1 moreIntent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker...7.8 High
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows...6.8 Medium
- google android, samsung mobile devices +1 moreIntent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreIntent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers...4.0 Medium
- google android, samsung mobile devices +1 moreImproper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers...7.1 High
- notfound galleryIntent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute...4.0 Medium