CVE-2025-46588

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: May 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-465897.1Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will affect integrity and CVE-2025-46595.3The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Pa CVE-2025-465906.5Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vulnerability can bypas CVE-2025-465915.5Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service c CVE-2025-465925.5Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerability may affect availab CVE-2025-465935.5Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulnerability may affect a CVE-2025-465956.4An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, c CVE-2025-465977.5Bitcoin Core 0.13.0 through 29.x has an integer overflow.CVE-2025-465985.3Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.CVE-2025-465996.8CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations,CVE-2025-46609.8A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pi CVE-2025-466025.5Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or