Fallos del tipo CWE-200
3943 resultadosCVE-2025-65951HIGHInside Track / Entropy Derby Timelock Encryption Bypassed via Pre-Computed VDF Output LeakageEPSS 0.1%CVE-2024-0020MEDIUMIn onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a EPSS 0.1%CVE-2026-11459MEDIUMSecureAge CatchPulse IOCTL saappctl.sys information disclosureEPSS 0.1%CVE-2024-43046MEDIUMInformation Exposure in TZ Secure OSEPSS 0.1%CVE-2025-54615MEDIUMVulnerability of insufficient information protection in the media library module.
Impact: Successful exploitation of this vulnerability may EPSS 0.1%CVE-2025-66963MEDIUMAn issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.htmlEPSS 0.1%CVE-2022-39904LOWExposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the NetEPSS 0.1%CVE-2018-9384MEDIUMIn multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosureEPSS 0.1%CVE-2026-43942MEDIUMelecterm: Full process.env exposed to renderer via window.pre.env in electermEPSS 0.1%CVE-2026-0005MEDIUMIn onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction witEPSS 0.1%CVE-2025-8304MEDIUMInformation Disclosure in Identity Agent Registry KeysEPSS 0.1%CVE-2025-48635HIGHIn multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. ThiEPSS 0.1%CVE-2025-8305MEDIUMInformation Disclosure in Identity Agent Debug FilesEPSS 0.1%CVE-2021-25392MEDIUMImproper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive infoEPSS 0.1%CVE-2026-0025HIGHIn hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead toEPSS 0.1%CVE-2022-33686LOWExposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.EPSS 0.1%CVE-2022-38688MEDIUMIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privEPSS 0.1%CVE-2025-58278MEDIUMIdentity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiEPSS 0.1%CVE-2026-33448MEDIUMFormat string vulnerability in MacOS clients prior to 14.50EPSS 0.1%CVE-2026-20730LOWBIG-IP Edge Client for Windows vulnerabilityEPSS 0.1%