CVE-2026-92862

Published: Ott 08, 2026 Last Modified: Ott 08, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,6
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: active
Confidentiality: N/A
Integrity: N/A
Availability: N/A
LOW 3,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: none

Description

AI Translation Available

The Android application 'Ticket Ryutsu Center' improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent.

939

Improper Authorization in Handler for Custom URL Scheme

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Other
Potential Impacts:
Gain Privileges Or Assume Identity Varies By Context Bypass Protection Mechanism
Applicable Platforms
Technologies: Mobile
View CWE Details
https://jvn.jp/en/jp/JVN53292492/
https://jvn.jp/en/jp/JVN53292492/
https://play.google.com/store/apps/details?id=jp.co.ticket
https://play.google.com/store/apps/details?id=jp.co.ticket