# CWE-927. Every Advisory and CVE whose sources give the weakness CWE-927, newest first. ## Records, newest first - [In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking.](https://agentprime.io/advisories/CVE-2025-48558.md) `CVE-2025-48558` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-927 - [An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data.](https://agentprime.io/advisories/CVE-2024-3480.md) `CVE-2024-3480` · CVE record: Motorola Phones · CVSS 2.8 Low · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.](https://agentprime.io/advisories/CVE-2024-3108.md) `CVE-2024-3108` · CVE record: Motorola Phones · CVSS 5.5 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.](https://agentprime.io/advisories/CVE-2023-41828.md) `CVE-2023-41828` · CVE record: Motorola Phones · CVSS 4.4 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permissi…](https://agentprime.io/advisories/CVE-2023-41826.md) `CVE-2023-41826` · CVE record: Motorola Phones · CVSS 5.1 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.](https://agentprime.io/advisories/CVE-2023-41824.md) `CVE-2023-41824` · CVE record: Motorola Phones · CVSS 2.8 Low · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.](https://agentprime.io/advisories/CVE-2023-41820.md) `CVE-2023-41820` · CVE record: Motorola Phones · CVSS 5.0 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information.](https://agentprime.io/advisories/CVE-2023-41817.md) `CVE-2023-41817` · CVE record: Motorola Phones · CVSS 2.8 Low · Not analysed yet · Published 3 May 2024 · Tags: CWE-927 - [The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers.](https://agentprime.io/advisories/CVE-2023-47889.md) `CVE-2023-47889` · CVE record · CVSS 7.8 High · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-927 - [Call management - Implicit activity intents disclose contact details and phone numbers](https://agentprime.io/advisories/CVE-2023-44127.md) `CVE-2023-44127` · CVE record: LG Electronics LG V60 Thin Q 5G(LMV600VM) · CVSS 3.6 Low · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-927 - [Screen recording - Theft of arbitrary files with system privilege](https://agentprime.io/advisories/CVE-2023-44124.md) `CVE-2023-44124` · CVE record: LG Electronics LG V60 Thin Q 5G(LMV600VM) · CVSS 6.1 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-927 - [LockScreenSettings - Theft arbitrary files with system privilege](https://agentprime.io/advisories/CVE-2023-44122.md) `CVE-2023-44122` · CVE record: LG Electronics LG V60 Thin Q 5G(LMV600VM) · CVSS 6.1 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-927 - [NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer compone…](https://agentprime.io/advisories/CVE-2023-31014.md) `CVE-2023-31014` · CVE record: NVIDIA GeForce NOW for Android mobile and TV app · CVSS 4.2 Medium · Not analysed yet · Published 20 Sept 2023 · Tags: CWE-927 - [CodenameOne Pending Intent vulnerability](https://agentprime.io/advisories/GHSA-p6xq-9h8r-v544.md) `GHSA-p6xq-9h8r-v544`, `CVE-2022-4903` · Maven `com.codenameone:codenameone-core`: affected `<7.0.71`, fixed in `7.0.71` · CVSS 5.0 Medium · Not analysed yet · Published 10 Feb 2023 · Tags: Information disclosure, CWE-927 - [Samsung Mobile Charm by Samsung: PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to…](https://agentprime.io/advisories/CVE-2022-36830.md) `CVE-2022-36830` · CVE record: Samsung Mobile Charm by Samsung · CVSS 6.2 Medium · Not analysed yet · Published 5 Aug 2022 · Tags: CWE-927 - [Samsung Mobile Charm by Samsung: PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to…](https://agentprime.io/advisories/CVE-2022-36829.md) `CVE-2022-36829` · CVE record: Samsung Mobile Charm by Samsung · CVSS 6.2 Medium · Not analysed yet · Published 5 Aug 2022 · Tags: CWE-927 - [Samsung Mobile Charm by Samsung: Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to…](https://agentprime.io/advisories/CVE-2022-33734.md) `CVE-2022-33734` · CVE record: Samsung Mobile Charm by Samsung · CVSS 6.2 Medium · Not analysed yet · Published 5 Aug 2022 · Tags: CWE-927 - [Samsung Mobile Charm by Samsung: Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to…](https://agentprime.io/advisories/CVE-2022-33733.md) `CVE-2022-33733` · CVE record: Samsung Mobile Charm by Samsung · CVSS 6.2 Medium · Not analysed yet · Published 5 Aug 2022 · Tags: CWE-927 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .