PT-2026-1770 · Google · Gmail

Felix Segoviano · Publicado 2026-01-08 · Atualizado 2026-01-09 · CVE-2025-15464

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gmail (affected versions not specified)

Description An exported activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls. This allows unauthorized access to Gmail inboxes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-926

Identificadores relacionados

CVE-2025-15464

Produtos afetados

Gmail

Referências · 9

• 🔥 http://seclists.org/fulldisclosure/2026/Jan/12 · Exploit
• 🔥 https://korelogic.com/Resources/Advisories/KL-001-2026-001.poc.js.txt · Exploit
• 🔥 https://korelogic.com/Resources/Advisories/KL-001-2026-001.txt · Exploit
• https://t.me/cveNotify/148147 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-15464 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2009444335847174475 · Publicação no Twitter
• https://t.me/CVEtracker/41768 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2009462333240959060 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-15464 · Aviso do Fabricante