CVE-2025-15464

Description

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls.

Affected Platforms

Weakness Type

CWE-926

References

• https://korelogic.com/Resources/Advisories/KL-001-2026-001.txt
• http://seclists.org/fulldisclosure/2026/Jan/12
• https://korelogic.com/Resources/Advisories/KL-001-2026-001.poc.js.txt