CVE-2026-20470None▾ SunlitIn Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 3.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.2%
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113385Medium· 5.3LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Class.forName improper export of android application components
CVE-2025-68713High· 8.0An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9
CVE-2026-21127Medium· 6.9Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
CVE-2025-14517Medium· 5.3A vulnerability was determined in Yalantis uCrop 2.2.11
CVE-2025-32347High· 7.8In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent
CVE-2025-10718Medium· 5.3A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android