Improper Export of Android Application Components

The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

CVEs (91)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-21485 1Samsung 1Android Jun 17, 2026 May 4, 2023 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
CVE-2023-20962 1Google 1Android Jun 17, 2026 Mar 24, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no...Show more In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-256590210Show less
CVE-2022-24929 1Google 1Android Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication.
CVE-2021-25527 1Samsung 1Pay Jun 17, 2026 Dec 8, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.
CVE-2021-25526 1Samsung 1Blockchain Wallet Jun 17, 2026 Dec 8, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action.
CVE-2021-25400 1Samsung 1Internet Jun 17, 2026 Jun 11, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action.
CVE-2021-25397 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications.
CVE-2021-25391 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 4.0 MEDIUM· v3 2.1 LOW· v2 Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.
CVE-2021-25390 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 4.0 MEDIUM· v3 1.9 LOW· v2 Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.
CVE-2021-25388 1Google 1Android Jun 17, 2026 Jun 11, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.
CVE-2021-25379 1Samsung 1Gallery Jun 17, 2026 Apr 9, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.

Previous 1 2 3 45