https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:04:31.250228+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-213 certfr-2022-avi-213 — De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant… 2026-10-03T14:04:31.302871+00:00 certfr-2022-avi-213 https://cve.radiocsirt.org/vuln/cnvd-2022-22956 cnvd-2022-22956 2026-10-03T14:04:31.302910+00:00 cnvd-2022-22956 https://cve.radiocsirt.org/vuln/euvd-2026-30774 EUVD-2026-30774 2026-10-03T14:04:31.302926+00:00 EUVD-2026-30774 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39692 fkie_cve-2021-39692 2026-10-03T14:04:31.302939+00:00

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209611539

 https://cve.radiocsirt.org/vuln/ghsa-2w9w-m6x3-g9c8 GHSA-2w9w-m6x3-g9c8 2026-10-03T14:04:31.302966+00:00

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-209611539

 https://cve.radiocsirt.org/vuln/gsd-2021-39692 gsd-2021-39692 2026-10-03T14:04:31.302982+00:00 gsd-2021-39692 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0112 WID-SEC-W-2022-0112 — Google Android: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-03T14:04:31.302993+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code zur Ausführung zu bringen und einen Denial-of-Service-Zustand auszulösen.