CWE-926

Improper Export of Android Application Components

Parent: CWE-285 - Improper Authorization

The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

82 vulnerabilities with CWE-926
CVE-2026-57848 MEDIUM
Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation
CVSS 5.5
CVE-2026-12960 MEDIUM
Asus Router App < 1.0.0.9.71 - Improper Export of Android Application Components
CVE-2026-54318 HIGH
Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location
CVSS 7.1
CVE-2026-44279 MEDIUM
FortiTokenAndroid 6.2, 6.1, 5.2 - Improper Export of Android Application Components
CVSS 5.5
CVE-2026-3291 MEDIUM
Samsung Print Service Plugin – Potential Information Disclosure
CVSS 5.5
CVE-2025-68713 HIGH
Rakuten Send Anywhere for Android 23.2.9 - Unauthenticated Arbitrary File Download and Code Execution
CVSS 8.0
CVE-2025-15464 HIGH
yintibao fun_print - Unauthenticated Exported Activity Hijacking
CVSS 7.5
CVE-2025-14517 MEDIUM
Yalantis uCrop 2.2.11 - Info Disclosure
CVSS 5.3
CVE-2025-10722 MEDIUM
SKTLab Mukbee App 1.01.196 - Info Disclosure
CVSS 5.3
CVE-2025-10721 MEDIUM
Webull Investing & Trading App 11.2.5.63 - Info Disclosure
CVSS 5.3
CVE-2025-10718 MEDIUM
Ooma Office Business Phone App <7.2.2 - Info Disclosure
CVSS 5.3
CVE-2025-10717 MEDIUM
intsig CamScanner App 6.91.1.5.250711 - Info Disclosure
CVSS 5.3
CVE-2025-10716 MEDIUM
Creality Cloud App <6.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-10715 MEDIUM
APEUni PTE Exam Practice App <10.8.0 - Info Disclosure
CVSS 5.3
CVE-2025-10195 MEDIUM
Seismic App 2.4.2 - Info Disclosure
CVSS 5.3
CVE-2025-5500 MEDIUM
ZhenShi Mibro Fit App 1.6.3.17499 - Info Disclosure
CVSS 5.3
CVE-2025-32347 HIGH
BiometricEnrollIntroduction - Info Disclosure
CVSS 7.8
CVE-2025-9695 MEDIUM
GalleryVault App <4.5.2 - Info Disclosure
CVSS 5.3
CVE-2025-9677 MEDIUM
Modo Legend of the Phoenix <1.0.5 - Info Disclosure
CVSS 5.3
CVE-2025-9676 MEDIUM
NCSOFT Universe App <1.3.0 - Info Disclosure
CVSS 5.3
CVE-2025-9675 MEDIUM
Voice Changer App <1.1.0 - Info Disclosure
CVSS 5.3
CVE-2025-9674 MEDIUM
Transbyte Scooper News App <1.2 - Info Disclosure
CVSS 5.3
CVE-2025-9673 MEDIUM
Kakao Hey Kakao App <2.17.4 - Info Disclosure
CVSS 5.3
CVE-2025-9672 MEDIUM
Rejseplanen App <8.2.2 - Info Disclosure
CVSS 5.3
CVE-2025-9671 MEDIUM
UAB Paytend App <2.1.9 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities 82