Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Profile scenarios due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-22433 is a logic error vulnerability found in the canForward method of IntentForwarderActivity.java within Google Android versions 13, 14, and 15. The vulnerability specifically affects the cross-profile intent filter mechanism, which is primarily used in Work Profile scenarios to separate personal and work data on the same device. Due to a flaw in the logic, the cross-profile intent filter can be bypassed, allowing an attacker with limited privileges on the device to forward intents across profiles improperly. This leads to an elevation of privilege without requiring additional execution privileges or user interaction, making the attack vector local but straightforward. The vulnerability is categorized under CWE-693, which relates to protection mechanism failures. The CVSS v3.1 base score is 7.8, reflecting high severity with impacts on confidentiality, integrity, and availability (all rated high). The attack vector is local (AV:L), with low attack complexity (AC:L), requiring low privileges (PR:L), and no user interaction (UI:N). The scope is unchanged (S:U), meaning the impact is confined to the vulnerable component but still severe. No patches were linked at the time of reporting, and no known exploits have been observed in the wild. This vulnerability threatens enterprise security models that rely on Work Profiles to isolate corporate data, potentially allowing malicious apps or users to bypass these controls and access or manipulate sensitive information.

Detailed information about CVE-2025-22433: Elevation of privilege in Google Android affecting Google Android. Get real-time updates, technical details, and miti

CVE-2025-22433: Elevation of privilege in Google Android - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-22433: Elevation of privilege in Google Android

Threats Tagged 'cve-2025-22433'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-22433'

Lead Pen Test Professional