deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-48538
Published: 2025-09-04
Description: In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://android.googlesource.com/platform/frameworks/base/+/bd7578b738a09734a2d23656e5569643ad37fffe; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48539
Published: 2025-09-04
Description: In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.0 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c881220f499edcbdff9a7efdf00beeaeba084245; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48540
Published: 2025-09-04
Description: In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://android.googlesource.com/platform/frameworks/native/+/570e2d6e29ee10879150f868913c285a45a936b1; https://android.googlesource.com/platform/frameworks/native/+/7fb4755c9d93bf75de13f2bc458fbbb547a79dd6; https://android.googlesource.com/platform/frameworks/native/+/ba4ea3598e6dcea4b7b2202f4cec11eb1d85c2a7
CVE: CVE-2025-48541
Published: 2025-09-04
Description: In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/packages/apps/Settings/+/aba2077a6c03f6d7b1a315c275e186ea0f2c1b6b; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48542
Published: 2025-09-04
Description: In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://android.googlesource.com/platform/frameworks/base/+/7ed50e5b5d568bc8be5d3603991aa9add67a7f44; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48543
Published: 2025-09-04
Description: In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2; https://source.android.com/security/bulletin/2025-09-01; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48543
CVE: CVE-2025-48544
Published: 2025-09-04
Description: In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89
References: https://source.android.com/docs/security/bulletin/2026/2026-03-01
CVE: CVE-2025-48545
Published: 2025-09-04
Description: In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-441
References: https://android.googlesource.com/platform/frameworks/base/+/66ac17909252c80b0edf7f4ae282bce4579410ad; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48546
Published: 2025-09-04
Description: In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/8b660e88700541ca70a01c7b25a52587ec65411f; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48547
Published: 2025-09-04
Description: In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/packages/modules/Permission/+/5dca0ccb26f2b99d706a1d3e9402f851e849c913; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48548
Published: 2025-09-04
Description: In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-362
References: https://android.googlesource.com/platform/frameworks/av/+/37e7f808fad105da187b021fb762a66d37c9212a; https://android.googlesource.com/platform/frameworks/av/+/8c09eb1034cb3b02a66f6c241c0b9c9981998d6f; https://android.googlesource.com/platform/frameworks/base/+/00344da68fce6ec4f7a1bf36f0ea3797805f00ce
CVE: CVE-2025-48549
Published: 2025-09-04
Description: In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://android.googlesource.com/platform/frameworks/av/+/37e7f808fad105da187b021fb762a66d37c9212a; https://android.googlesource.com/platform/frameworks/av/+/8c09eb1034cb3b02a66f6c241c0b9c9981998d6f; https://android.googlesource.com/platform/frameworks/base/+/00344da68fce6ec4f7a1bf36f0ea3797805f00ce
CVE: CVE-2025-48550
Published: 2025-09-04
Description: In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://android.googlesource.com/platform/frameworks/base/+/354820f6ec38e8c50140bb5247779d3a3423b4c4; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48551
Published: 2025-09-04
Description: In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-441
References: https://android.googlesource.com/platform/packages/modules/IntentResolver/+/13c30b464d042f3e00899ffcf1c02b76bc35f769; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48552
Published: 2025-09-04
Description: In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://android.googlesource.com/platform/frameworks/base/+/bb6d2f17243ddd4313f826b9ac6119fb40962ee7; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48553
Published: 2025-09-04
Description: In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://android.googlesource.com/platform/frameworks/base/+/660c7075dc00d23a47f8b2018d62c66b8e27c450; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48554
Published: 2025-09-04
Description: In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-693
References: https://android.googlesource.com/platform/frameworks/base/+/660c7075dc00d23a47f8b2018d62c66b8e27c450; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48556
Published: 2025-09-04
Description: In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://android.googlesource.com/platform/frameworks/base/+/fc5d9b6ef5305263d37404fc3d4afe583a15c62b; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48558
Published: 2025-09-04
Description: In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-927
References: https://android.googlesource.com/platform/frameworks/base/+/0d30c78c8953adfc969a8dba8a58a8ea3571908c; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48559
Published: 2025-09-04
Description: In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://android.googlesource.com/platform/frameworks/base/+/7b88db4928f390cb7656dcc4a14fac2d645301a9; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48560
Published: 2025-09-04
Description: In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-441
References: https://source.android.com/security/bulletin/wear/2025-09-01
CVE: CVE-2025-48561
Published: 2025-09-04
Description: In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48562
Published: 2025-09-04
Description: In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-209
References: https://android.googlesource.com/platform/frameworks/base/+/252efec89b01a89b4d394c500e9dae2b6c08dbae; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48563
Published: 2025-09-04
Description: In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-453
References: https://android.googlesource.com/platform/frameworks/base/+/a6a570a6f4972c1dfea13c5fe3558805c1658991; https://source.android.com/security/bulletin/2025-09-01
CVE: CVE-2025-48581
Published: 2025-09-04
Description: In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.4 (HIGH)
CWE: CWE-754
References: https://android.googlesource.com/platform/build/+/cda08bfbf55aed1e4c79efe6a66bb930d19a8a13; https://android.googlesource.com/platform/system/apex/+/13bbfe3ef2953e9805d57d3219cc122e485ba90f; https://android.googlesource.com/platform/system/apex/+/5a33fa4202cb5f06d7f02f3a2b8d13780d7cb3f5
CVE: CVE-2024-40664
Published: 2025-09-04
Description: In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-400
References: https://source.android.com/security/bulletin/wear/2025-05-01
CVE: CVE-2024-49731
Published: 2025-09-04
Description: In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new Pixel Watch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-266
References: https://source.android.com/security/bulletin/wear/2025-02-01
CVE: CVE-2025-22414
Published: 2025-09-04
Description: In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/wear/2025-03-01
CVE: CVE-2025-22415
Published: 2025-09-04
Description: In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-266
References: https://source.android.com/security/bulletin/wear/2025-03-01
CVE: CVE-2025-26419
Published: 2025-09-04
Description: In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 3.3 (LOW)
CWE: CWE-290
References: https://source.android.com/security/bulletin/wear/2025-05-01
CVE: CVE-2025-26431
Published: 2025-09-04
Description: In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/wear/2025-05-01
CVE: CVE-2025-26439
Published: 2025-09-04
Description: In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead of the system component due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://source.android.com/security/bulletin/wear/2025-05-01
CVE: CVE-2025-32322
Published: 2025-09-04
Description: In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recording capabilities due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/wear/2025-09-01
CVE: CVE-2025-58353
Published: 2025-09-04
Description: Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining  LLM-powered applications. All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as r`eplace(/javascript:/gi, '')`. Because the package uses multi-character tokens and each replacement is applied only once, removing one occurrence can create a new dangerous token due to overlap. The “sanitized” value may still contain an executable payload when used in href/src (or injected into the DOM). There is currently no fix for this issue.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-79, CWE-184
References: https://github.com/MarceloTessaro/promptcraft-forge-studio/security/advisories/GHSA-mv25-7v95-q3pf
CVE: CVE-2025-58361
Published: 2025-09-04
Description: Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining  LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, but the check only strips `javascript:` and a few patterns. `data:` URLs (for example data:image/svg+xml,…) still pass. If a sanitized value is used in href/src, an attacker can execute a script. There is currently no fix for this issue.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-20, CWE-79, CWE-184
References: https://github.com/MarceloTessaro/promptcraft-forge-studio/security/advisories/GHSA-fjch-4g87-g4p4
CVE: CVE-2025-54914
Published: 2025-09-04
Description: Azure Networking Elevation of Privilege Vulnerability
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54914
CVE: CVE-2025-55190
Published: 2025-09-04
Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials (usernames, passwords) through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. This vulnerability does not only affect project-level permissions. Any token with project get permissions is also vulnerable, including global permissions such as: `p, role/user, projects, get, *, allow`. This issue is fixed in versions 2.13.9, 2.14.16, 3.0.14 and 3.1.2.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-200
References: https://github.com/argoproj/argo-cd/commit/e8f86101f5378662ae6151ce5c3a76e9141900e8; https://github.com/argoproj/argo-cd/security/advisories/GHSA-786q-9hcg-v9ff
CVE: CVE-2025-55209
Published: 2025-09-04
Description: contactmanager is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions 15.0.14 and below, 16.0.0 through 16.0.26.4 and  17.0.0 through 17.0.5, a stored cross-site scripting (XSS) vulnerability in FreePBX allows a low-privileged User Control Panel (UCP) user to inject malicious JavaScript into the system. The malicious code executes in the context of an administrator when they interact with the affected component, leading to session hijacking and potential privilege escalation. This issue is fixed in versions 15.0.14, 16.0.27 and 17.0.6.
CWE: CWE-79
References: https://github.com/FreePBX/contactmanager/commit/55abba0f1ab5d66ba87732fd06179231d1f68184; https://github.com/FreePBX/security-reporting/security/advisories/GHSA-j654-x3q2-6wm3
CVE: CVE-2025-55238
Published: 2025-09-04
Description: Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55238
CVE: CVE-2025-55241
Published: 2025-09-04
Description: Azure Entra ID Elevation of Privilege Vulnerability
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55241; https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
CVE: CVE-2025-55242
Published: 2025-09-04
Description: Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55242
CVE: CVE-2025-55244
Published: 2025-09-04
Description: Azure Bot Service Elevation of Privilege Vulnerability
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55244
CVE: CVE-2025-55305
Published: 2025-09-04
Description: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is fixed in versions 35.7.5, 36.8.1, 37.3.1 and 38.0.0-beta.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94, CWE-829
References: https://github.com/electron/electron/commit/23a02934510fcf951428e14573d9b2d2a3c4f28b; https://github.com/electron/electron/commit/2e5a0b7220ebf955c6785cc5adb2e2b1cf77dac1; https://github.com/electron/electron/commit/3f92511cdecc39f46b0e86cce40a0c691e301c9d
CVE: CVE-2025-55739
Published: 2025-09-05
Description: api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX). In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An attacker with access to the shared OAuth private key could forge JWT tokens, bypass authentication, and potentially gain full access to both REST and GraphQL APIs. Systems with the "api" module enabled, configured and previously activated by an administrator for remote inbound connections may be affected. This issue is fixed in versions 15.0.13, 16.0.15 and 17.0.3.
CWE: CWE-522, CWE-798
References: https://github.com/FreePBX/api/commit/305295aad38322c74cffd75bf550707dfb1a64a2; https://github.com/FreePBX/security-reporting/security/advisories/GHSA-3r47-p39v-vqqf