CVE-2025-15464High· 7.5▾ TwilightExported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.5%
Last analysed / modified upstream
Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls.
fun_print = 6.05.15Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113385Medium· 5.3LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components
CVE-2025-68713High· 8.0An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9
CVE-2026-21127Medium· 6.9Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
CVE-2025-14517Medium· 5.3A vulnerability was determined in Yalantis uCrop 2.2.11
CVE-2025-32347High· 7.8In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent
CVE-2025-10718Medium· 5.3A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android