CVE-2026-107026
Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's cl
CVSS
7.5
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 29 oct 2026 · Última mod.: 29 oct 2026 · CWE-732
Sin historial EPSS suficiente todavía.
Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.
- f-droid.orghttps://f-droid.org/packages/com.tengu.sharetoclipboard/
- github.comhttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107026.md
- github.comhttps://github.com/tengusw/share_to_clipboard
- github.comhttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107026.md
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-118574——
———Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.6hCVE-2026-1070477.5 ALT—
———Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.14hCVE-2026-1070427.5 ALT—
———Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI.14hCVE-2026-1034046.8 MED—
——0An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory.2dCVE-2026-923777.8 ALT1.2%
——0Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forged IPC response and
cause it to load a malicious DLL from a user-writable temporary directory.
Successful exploitation results in arbitrary code execution with NT
AUTHORITY\SYSTEM privileges.2dCVE-2026-90464—30.2%
——9An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Monitor) privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel parameters with root privileges by submitting a specially crafted command. Written content is limited to numeric values.2d