Aggregator

CVE-2025-48642 | Google Android 14/15/16/16-qpr2 payload.rs jump_to_payload information disclosure (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability labeled as problematic has been found in Google Android 14/15/16/16-qpr2. This impacts the function jump_to_payload of the file payload.rs. The manipulation results in information disclosure. This vulnerability is identified as CVE-2025-48642. The attack is only possible with local access. There is not any exploit available. Applying a patch is advised to resolve this issue.
vuldb.com

CVE-2025-48646 | Google Android 14/15/16/16-qpr2 ActivityStarter.java executeRequest confused deputy (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability classified as problematic has been found in Google Android 14/15/16/16-qpr2. Affected by this issue is the function executeRequest of the file ActivityStarter.java. Performing a manipulation results in unintended intermediary. This vulnerability is cataloged as CVE-2025-48646. The attack must be initiated from a local position. There is no exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2025-48645 | Google Android 14/15/16/16-qpr2 DeviceAdminInfo.java loadDescription input validation (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability classified as problematic was found in Google Android 14/15/16/16-qpr2. This affects the function loadDescription of the file DeviceAdminInfo.java. Executing a manipulation can lead to improper input validation. This vulnerability is registered as CVE-2025-48645. The attack needs to be launched locally. No exploit is available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2025-48630 | Google Android 14/15/16/16-qpr2 SkiaRenderEngine.cpp drawLayersInternal information disclosure (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability was found in Google Android 14/15/16/16-qpr2 and classified as problematic. Affected by this vulnerability is the function drawLayersInternal of the file SkiaRenderEngine.cpp. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2025-48630. It is possible to launch the attack on the local host. There is not any exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2025-48634 | Google Android 14/15/16 WindowManagerService.java relayoutWindow permission (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability described as critical has been identified in Google Android 14/15/16. This affects the function relayoutWindow of the file WindowManagerService.java. The manipulation results in permission issues. This vulnerability is cataloged as CVE-2025-48634. The attack must be initiated from a local position. There is no exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2025-48641 | Google Android 14/15/16/16-qpr2 Nfc.h use after free (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability, which was classified as critical, was found in Google Android 14/15/16/16-qpr2. Affected by this issue is some unknown functionality in the library Nfc.h. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2025-48641. The attack requires local access. There is no available exploit. Applying a patch is advised to resolve this issue.
vuldb.com

CVE-2025-48635 | Google Android 14/15 TaskFragmentOrganizerController.java information disclosure (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability was found in Google Android 14/15. It has been classified as problematic. This issue affects some unknown processing of the file TaskFragmentOrganizerController.java. This manipulation causes information disclosure. This vulnerability is handled as CVE-2025-48635. It is possible to launch the attack on the local host. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2025-48619 | Google Android 14/15/16 ContentProvider.java information disclosure (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability classified as problematic has been found in Google Android 14/15/16. This issue affects some unknown processing of the file ContentProvider.java. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2025-48619. The attack must be carried out locally. There is no available exploit. It is suggested to install a patch to address this issue.
vuldb.com

INC

Dark Feed IO
2 weeks 5 days ago

You must login to view this content

cohenido

INC

Dark Feed IO
2 weeks 5 days ago

You must login to view this content

cohenido

INC

Dark Feed IO
2 weeks 5 days ago

You must login to view this content

cohenido

Survey: CISOs Continue to Struggle to Strike Right Risk Balance

Security Boulevard
2 weeks 5 days ago

A survey of 422 CISOs finds that while well over half (61%) believe their organizations are highly competent when it comes to cybersecurity and cyber resilience, less than half (45%) said their organization’s risk appetite is effectively aligned with cybersecurity risk management even though 57% claimed their communications channels with the line of business units..

The post Survey: CISOs Continue to Struggle to Strike Right Risk Balance appeared first on Security Boulevard.

Michael Vizard

CVE-2025-48609 | Google Android 14/15/16 MmsProvider.java denial of service (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability classified as problematic was found in Google Android 14/15/16. Affected is an unknown function of the file MmsProvider.java. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2025-48609. The attack needs to be performed locally. There is not any exploit available. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2025-48602 | Google Android 14/15/16 KeyguardViewMediator.java exitKeyguardAndFinishSurfaceBehindRemoteAnimation protection mechanism (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability has been found in Google Android 14/15/16 and classified as critical. Affected is the function exitKeyguardAndFinishSurfaceBehindRemoteAnimation of the file KeyguardViewMediator.java. Performing a manipulation results in protection mechanism failure. This vulnerability is known as CVE-2025-48602. Remote exploitation of the attack is possible. No exploit is available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2025-48587 | Google Android 16 ProfilingService.java denial of service (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability labeled as problematic has been found in Google Android 16. The affected element is an unknown function of the file ProfilingService.java. Executing a manipulation can lead to denial of service. This vulnerability is tracked as CVE-2025-48587. The attack is restricted to local execution. No exploit exists. A patch should be applied to remediate this issue.
vuldb.com

CVE-2025-48585 | Google Android 16 ProfilingService.java denial of service (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability classified as problematic has been found in Google Android 16. This impacts an unknown function of the file ProfilingService.java. This manipulation causes denial of service. This vulnerability is registered as CVE-2025-48585. The attack needs to be launched locally. No exploit is available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2025-48582 | Google Android 14/15/16 Media permission (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability, which was classified as critical, has been found in Google Android 14/15/16. Affected by this vulnerability is an unknown functionality of the component Media Handler. Performing a manipulation results in permission issues. This vulnerability is reported as CVE-2025-48582. The attack requires a local approach. No exploit exists. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-48605 | Google Android 14/15/16 KeyguardViewMediator.java protection mechanism (WID-SEC-2026-0569)

Vuldb Updates
2 weeks 5 days ago
A vulnerability has been found in Google Android 14/15/16 and classified as problematic. This affects an unknown part of the file KeyguardViewMediator.java. The manipulation leads to protection mechanism failure. This vulnerability is traded as CVE-2025-48605. An attack has to be approached locally. There is no exploit available. It is suggested to install a patch to address this issue.
vuldb.com

Managed ad