# CWE-926. Every Advisory and CVE whose sources give the weakness CWE-926, newest first. ## Records, newest first (an older page) - [Rejseplanen App de.hafas.android.rejseplanen AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9672.md) `CVE-2025-9672` · CVE record: Rejseplanen App · CVSS 4.8 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: CWE-926 - [UAB Paytend App com.passport.cash AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9671.md) `CVE-2025-9671` · CVE record: UAB Paytend App · CVSS 4.8 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: CWE-926 - [Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9135.md) `CVE-2025-9135` · CVE record: Verkehrsauskunft Österreich SmartRide and 3 more · CVSS 4.8 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-926 - [AfterShip Package Tracker App com.aftership.AfterShip AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9134.md) `CVE-2025-9134` · CVE record: AfterShip Package Tracker App · CVSS 4.8 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-926 - [1&1 Mail & Media mail.com App com.mail.mobile.android.mail AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9102.md) `CVE-2025-9102` · CVE record: 1&1 Mail & Media mail.com App · CVSS 4.8 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-926 - [Elseplus File Recovery App AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9098.md) `CVE-2025-9098` · CVE record: Elseplus File Recovery App · CVSS 4.8 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-926 - [Euro Information CIC banque et compte en ligne App com.cic_prod.bad AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9097.md) `CVE-2025-9097` · CVE record: Euro Information CIC banque et compte en ligne App · CVSS 4.8 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-926 - [BuzzFeed App com.buzzfeed.android AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-9093.md) `CVE-2025-9093` · CVE record: BuzzFeed App · CVSS 4.8 Medium · Not analysed yet · Published 17 Aug 2025 · Tags: CWE-926 - [Weee RICEPO App com.ricepo.app AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8745.md) `CVE-2025-8745` · CVE record: Weee RICEPO App · CVSS 4.8 Medium · Not analysed yet · Published 9 Aug 2025 · Tags: CWE-926 - [Huuge Box App com.huuge.game.zjbox AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8707.md) `CVE-2025-8707` · CVE record: Huuge Box App · CVSS 4.8 Medium · Not analysed yet · Published 8 Aug 2025 · Tags: CWE-926 - [Boquan DotWallet App com.boquanhash.dotwallet AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8524.md) `CVE-2025-8524` · CVE record: Boquan DotWallet App · CVSS 4.8 Medium · Not analysed yet · Published 4 Aug 2025 · Tags: CWE-926 - [RiderLike Fruit Crush-Brain App com.fruitcrush.fun AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8523.md) `CVE-2025-8523` · CVE record: RiderLike Fruit Crush-Brain App · CVSS 4.8 Medium · Not analysed yet · Published 4 Aug 2025 · Tags: CWE-926 - [Caixin News App com.caixin.news AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8513.md) `CVE-2025-8513` · CVE record: Caixin News App · CVSS 4.8 Medium · Not analysed yet · Published 3 Aug 2025 · Tags: CWE-926 - [TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8512.md) `CVE-2025-8512` · CVE record: TVB Big Big Shop App · CVSS 4.8 Medium · Not analysed yet · Published 3 Aug 2025 · Tags: CWE-926 - [bsc Peru Cocktails App bsc.devy.peru_cocktails AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8275.md) `CVE-2025-8275` · CVE record: bsc Peru Cocktails App · CVSS 4.8 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-926 - [Cool Mo Maigcal Number App com.sdmagic.number AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8258.md) `CVE-2025-8258` · CVE record: Cool Mo Maigcal Number App · CVSS 4.8 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-926 - [Lobby Universe Lobby App com.maverick.lobby AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8257.md) `CVE-2025-8257` · CVE record: Lobby Universe Lobby App · CVSS 4.8 Medium · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-926 - [Yeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8210.md) `CVE-2025-8210` · CVE record: Yeelink Yeelight App · CVSS 4.8 Medium · Not analysed yet · Published 26 Jul 2025 · Tags: CWE-926 - [Canara ai1 Mobile Banking App com.canarabank.mobility AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-8207.md) `CVE-2025-8207` · CVE record: Canara ai1 Mobile Banking App · CVSS 4.8 Medium · Not analysed yet · Published 26 Jul 2025 · Tags: CWE-926 - [Genshin Albedo Cat House App com.house.auscat AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-7940.md) `CVE-2025-7940` · CVE record: Genshin Albedo Cat House App · CVSS 4.8 Medium · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-926 - [Foresight News App pro.foresightnews.appa AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-7893.md) `CVE-2025-7893` · CVE record: Foresight News App · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-926 - [IDnow App de.idnow AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-7892.md) `CVE-2025-7892` · CVE record: IDnow App · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-926 - [InstantBits Web Video Cast App com.instantbits.cast.webvideo AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-7891.md) `CVE-2025-7891` · CVE record: InstantBits Web Video Cast App · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-926 - [Dunamu StockPlus App com.dunamu.stockplus AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-7890.md) `CVE-2025-7890` · CVE record: Dunamu StockPlus App · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-926 - [CallApp Caller ID App caller.id.phone.number.block AndroidManifest.xml improper export of android application components](https://agentprime.io/advisories/CVE-2025-7889.md) `CVE-2025-7889` · CVE record: CallApp Caller ID App · CVSS 4.8 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-926 - [File removal via path traversal in unsecured broadcast receiver in Bluebird barcode scanner application](https://agentprime.io/advisories/CVE-2025-5346.md) `CVE-2025-5346` · CVE record: Bluebird kr.co.bluebird.android.bbsettings · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2025 · Tags: CWE-926 - [Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application](https://agentprime.io/advisories/CVE-2025-5344.md) `CVE-2025-5344` · CVE record: Bluebird com.bluebird.kiosk.launcher · CVSS 8.5 High · Not analysed yet · Published 17 Jul 2025 · Tags: CWE-926 - [Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application](https://agentprime.io/advisories/CVE-2025-5345.md) `CVE-2025-5345` · CVE record: Bluebird com.bluebird.filemanagers · CVSS 6.3 Medium · Not analysed yet · Published 17 Jul 2025 · Tags: CWE-926 - [Intent Injection in Kruger&Matz AppLock application](https://agentprime.io/advisories/CVE-2024-13917.md) `CVE-2024-13917` · CVE record: Kruger&Matz com.pri.applock · CVSS 8.3 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-926 - [Exposure of Applications' Encryption PINs in Kruger&Matz AppLock](https://agentprime.io/advisories/CVE-2024-13916.md) `CVE-2024-13916` · CVE record: Kruger&Matz com.pri.applock · CVSS 6.9 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-926 - [Unrestricted Access to Exported Service in com.pri.factorytest](https://agentprime.io/advisories/CVE-2024-13915.md) `CVE-2024-13915` · CVE record: Ulefone com.pri.factorytest and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-926 - [Element X Android vulnerable to loading malicious web pages via received intent](https://agentprime.io/advisories/CVE-2025-27599.md) `CVE-2025-27599` · CVE record: element-hq element-x-android · CVSS 6.5 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-20, CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2025-20934.md) `CVE-2025-20934` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-926 - [The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (with no permissions) to place phone calls without user intera…](https://agentprime.io/advisories/CVE-2024-36437.md) `CVE-2024-36437` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 3 Feb 2025 · Tags: CWE-926 - [Cross Application Scripting in Redlink SDK](https://agentprime.io/advisories/CVE-2024-6051.md) `CVE-2024-6051` · CVE record: Vercom S.A. Redlink SDK · CVSS 4.3 Medium · Not analysed yet · Published 30 Sept 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2024-3479.md) `CVE-2024-3479` · CVE record: Motorola Phones · CVSS 2.8 Low · Not analysed yet · Published 3 May 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2023-41823.md) `CVE-2023-41823` · CVE record: Motorola Phones · CVSS 4.4 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2023-41822.md) `CVE-2023-41822` · CVE record: Motorola Phones · CVSS 4.8 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2023-41821.md) `CVE-2023-41821` · CVE record: Motorola Phones · CVSS 5.0 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2023-41816.md) `CVE-2023-41816` · CVE record: Motorola Phones · CVSS 5.0 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-926 - [MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service](https://agentprime.io/advisories/GHSA-x674-v45j-fwxw.md) `GHSA-x674-v45j-fwxw`, `CVE-2024-27086` · NuGet `Microsoft.Identity.Client`: affected `>=4.48.0, <4.59.1 || >=4.60.0, <4.60.3`, fixed in `4.59.1`, `4.60.3` · CVSS 3.9 Low · Not analysed yet · Published 16 Apr 2024 · Tags: Broken access control, CWE-926 - [React Native Sms User Consent Intent Redirection Vulnerability](https://agentprime.io/advisories/GHSA-r956-2553-vvhr.md) `GHSA-r956-2553-vvhr`, `CVE-2021-4438` · npm `@kyivstarteam/react-native-sms-user-consent`: affected `<1.1.5`, fixed in `1.1.5` · CVSS 5.3 Medium · Not analysed yet · Published 7 Apr 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2023-41829.md) `CVE-2023-41829` · CVE record: Motorola Phones · CVSS 5.0 Medium · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-926 - [Exported Android component in Motorola Phones](https://agentprime.io/advisories/CVE-2023-41827.md) `CVE-2023-41827` · CVE record: Motorola Phones · CVSS 5.1 Medium · Not analysed yet · Published 4 Mar 2024 · Tags: CWE-926 - [Exported Android component in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others](https://agentprime.io/advisories/CVE-2023-41960.md) `CVE-2023-41960` · CVE record: Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and 2 more · CVSS 7.1 High · Not analysed yet · Published 25 Oct 2023 · Tags: CWE-926 - [Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity](https://agentprime.io/advisories/CVE-2023-44129.md) `CVE-2023-44129` · CVE record: LG Electronics LG V60 Thin Q 5G(LMV600VM) · CVSS 3.6 Low · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-926 - [LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere](https://agentprime.io/advisories/CVE-2023-44121.md) `CVE-2023-44121` · CVE record: LG Electronics LG V60 Thin Q 5G(LMV600VM) · CVSS 5.0 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21486.md) `CVE-2023-21486` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2023 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2023-21485.md) `CVE-2023-21485` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2023 · Tags: CWE-926 - [Exported Android component in Android](https://agentprime.io/advisories/CVE-2023-20962.md) `CVE-2023-20962` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 24 Mar 2023 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2022-24929.md) `CVE-2022-24929` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.1 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Samsung Pay](https://agentprime.io/advisories/CVE-2021-25527.md) `CVE-2021-25527` · CVE record: Samsung Mobile Samsung Pay · CVSS 3.8 Low · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Samsung Blockchain Wallet](https://agentprime.io/advisories/CVE-2021-25526.md) `CVE-2021-25526` · CVE record: Samsung Mobile Samsung Blockchain Wallet · CVSS 4.0 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Samsug Internet](https://agentprime.io/advisories/CVE-2021-25400.md) `CVE-2021-25400` · CVE record: Samsung Mobile Samsug Internet · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25397.md) `CVE-2021-25397` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 6.8 Medium · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25391.md) `CVE-2021-25391` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25390.md) `CVE-2021-25390` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.0 Medium · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Devices](https://agentprime.io/advisories/CVE-2021-25388.md) `CVE-2021-25388` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 7.1 High · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-926 - [Exported Android component in Samsung Mobile Gallery](https://agentprime.io/advisories/CVE-2021-25379.md) `CVE-2021-25379` · CVE record: Samsung Mobile Gallery · CVSS 4.0 Medium · Not analysed yet · Published 9 Apr 2021 · Tags: CWE-926 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .