CVE-2022-41926

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk Android is upgraded to 14.1.0. There are no known workarounds for this issue.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-732

Affected software

VendorProductVersions
nextcloudsecurity-advisories< 14.1.0

References

Timeline

Published
Nov 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-419277.4XWiki Platform is vulnerable to Cross-Site Request Forgery (CSRF) that may allow attackers to delete or rename tags without needing any confCVE-2022-419288.8XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xmCVE-2022-419294.9org.xwiki.platform:xwiki-platform-oldcore is missing authorization in User#setDisabledStatus, which may allow an incorrectly authorized userCVE-2022-41938.8Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system rCVE-2022-419308.2org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user (logged in or not) with acceCVE-2022-419318.8xwiki-platform-icon-ui is vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection'). Any user witCVE-2022-419325.3XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make XWiki create CVE-2022-419336.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When the `reset a forgotten passworCVE-2022-419348.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on commonCVE-2022-419354.3XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without the right to view docCVE-2022-419367.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modifications` rest endpoint dCVE-2022-419378.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The application allows anyone with