Cpe:2.3:a:share_to_clipboard_project:share_to_clipboard:1.14.1:*:*:*:*:android:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ashare_to_clipboard_projectshare_to_clipboard1.14.1android/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 01:10:12 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgShare to Clipboard: Insecure permissions clipboard overwrite (CVE-2026-107026)https://feed.craftedsignal.io/briefs/2026-10-share-to-clipboard-vulnerability/Fri, 30 Oct 2026 01:10:12 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-share-to-clipboard-vulnerability/An insecure permission vulnerability in Share to Clipboard version 1.14.1 allows unauthorized local attackers to arbitrarily overwrite the clipboard content of other users on the device.CVE-2026-107026 describes an insecure permission vulnerability in the Android application "Share to Clipboard" version 1.14.1 (versionCode 32). This flaw permits an unauthorized actor to perform unauthorized writes to the system clipboard, effectively allowing them to overwrite data stored by other users on the same device. The impact is primarily a compromise of the clipboard's integrity and potential information manipulation or injection.

Impact

Successful exploitation allows an unauthorized party to overwrite clipboard data, which could be leveraged to replace legitimate content with malicious links, credentials, or other payloads intended for the victim to paste inadvertently.

Recommendation

  • Identify all devices within the environment that have "Share to Clipboard" version 1.14.1 (versionCode 32) installed.
  • Remove or restrict the usage of the affected application until a vendor-provided update is confirmed.
  • Implement mobile device management (MDM) policies to audit or block applications with insecure local IPC (Inter-Process Communication) permissions.
]]>highadvisory