NVD disclosure day
CVE-2025-48633
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A logic error in Android's Device Policy Manager Service allows for privilege escalation by adding a Device Owner after provisioning. This impacts affected organizations by enabling local attackers to gain elevated device control without user interaction, posing a business risk to data and operations.
CVE-2025-48572
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A permissions bypass in the Android operating system framework allows for local privilege escalation without user interaction. This impacts organizations using affected Android devices by enabling attackers to gain elevated control and access. The realistic business risk involves unauthorized system access and potentia
CVE-2023-53751
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Linux kernel's CIFS component could allow for use-after-free bugs when handling server hostnames during reconnection. This could lead to system instability or unexpected behavior if reachable.
CVE-2025-40320
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's SMB client when handling retried file information queries. This could lead to system instability or unpredictable behavior.