CVE-2025-15464CWE-926

CVE-2025-15464

High · published January 9, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

🚨 External apps can now tap into your Gmail inbox without a security check! This CVE-2025-15464 vulnerability lets anyone bypass security controls, and the consequences could be wild. ⚡ Think of it like a hotel concierge who gives guests a key to every room without verifying their identity. Suddenly, anyone can launch into your inbox like an unwanted visitor rummaging through your private belongings! If exploited, an attacker could gain unauthorized access to your emails, snooping on private conversations or even launching phishing attacks directly from your account. The implications are absolutely devastating if sensitive information is leaked or misused. Protecting your email is more crucial than ever!

Put simply

Think of it like a hotel concierge who gives guests a key to every room without verifying their identity. Suddenly, anyone can launch into your inbox like an unwanted visitor rummaging through your private belongings! This vulnerability in Exported Activity allows external applications to gain access to the application's context and launch Gmail directly, effectively bypassing critical security measures that should keep unauthorized access at bay.

What to do

If exploited, an attacker could gain unauthorized access to your emails, snooping on private conversations or even launching phishing attacks directly from your account. The implications are absolutely devastating if sensitive information is leaked or misused. Protecting your email is more crucial than ever! Update to the latest version of your application to ensure this loophole is patched. Review your application settings and disable any unnecessary access permissions for external apps. Be proactive in auditing your account activity regularly! You've got this! Follow the steps, secure your inbox, and keep your digital world safe! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Weakness
CWE-926 · Improper Export of Android Application Components
Published
2026-01-09T02:15Z
Affected products (1)
ProductVersionsFixed in
yintibao/fun_printall versions—
References (3)
EPSS history
Timeline
  • 08 JAN 21:01Z
    KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking
    cvelistv5