CVE-2025-15464

Summary

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls.

Affected Software

Weaknesses

• CWE-926: CWE-926 Improper Export of Android Application Components

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://korelogic.com/Resources/Advisories/KL-001-2026-001.poc.js.txt

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2026/Jan/12

References

• https://korelogic.com/Resources/Advisories/KL-001-2026-001.txt

• ←Previous
• Next→