CRITICAL 9.1 NVD
CVE-2026-107015
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.
References
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CV
- https://github.com/SimpleMobileTools/Simple-Contacts
- https://github.com/kanytu/Simple-Contacts/issues/628
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CV
This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-10-29 via NVD.
Risk Timeline
CVE Disclosed2026-10-29 · -1 days ago
Remediation Resources
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.