VULNERABILITY INTELLIGENCE
CVE-2010-4804
CVSS score4.3 MEDIUM
EPSS probability26.95%
CISA KEVNot currently listed
Published2011-06-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor