https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:55:05 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1158 certfr-2026-avi-1158 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1158 https://vulnerability.circl.lu/vuln/fkie_cve-2026-28663 <p>In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p> <p>In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-28663 https://vulnerability.circl.lu/vuln/ghsa-hg3v-6cg9-rg8m <p>In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p> <p>In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.</p> https://vulnerability.circl.lu/vuln/ghsa-hg3v-6cg9-rg8m