Security Vulnerabilities
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVSS Score
4.8
EPSS Score
0.001
Published
2026-06-05
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVSS Score
5.1
EPSS Score
0.001
Published
2026-06-05
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVSS Score
6.8
EPSS Score
0.001
Published
2026-06-05
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVSS Score
6.4
EPSS Score
0.001
Published
2026-06-05
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVSS Score
5.2
EPSS Score
0.001
Published
2026-06-05
Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-06-05
Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-06-05
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVSS Score
4.6
EPSS Score
0.001
Published
2026-06-05
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVSS Score
6.9
EPSS Score
0.001
Published
2026-06-05
CVE-2026-48907
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.
Known exploited
CVSS Score
10.0
EPSS Score
0.804
Published
2026-06-05