https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:04:26.114832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0172 certfr-2025-avi-0172 — De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant… 2026-10-03T04:04:26.171636+00:00 certfr-2025-avi-0172 https://cve.radiocsirt.org/vuln/cnvd-2025-19997 cnvd-2025-19997 2026-10-03T04:04:26.171680+00:00 cnvd-2025-19997 https://cve.radiocsirt.org/vuln/euvd-2026-250993 EUVD-2026-250993 2026-10-03T04:04:26.171696+00:00 EUVD-2026-250993 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26417 fkie_cve-2025-26417 2026-10-03T04:04:26.171708+00:00

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

 https://cve.radiocsirt.org/vuln/ghsa-2j2g-7cwq-wpvg GHSA-2j2g-7cwq-wpvg 2026-10-03T04:04:26.171737+00:00

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0477 WID-SEC-W-2025-0477 — Android Patchday März 2025: Mehrere Schwachstellen 2026-10-03T04:04:26.171753+00:00

Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen oder vertrauliche Informationen preiszugeben.