VYPR
Unrated severityNVD Advisory· Published Mar 2, 2026· Updated Mar 6, 2026

CVE-2025-48646

CVE-2025-48646

Description

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.