{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3auspultimate_screenshot_painter240213.009/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:usp:ultimate_screenshot_painter:240213.009:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-107042"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Ultimate Screenshot Painter (240213.009)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["USP"],"content_html":"\u003cp\u003eUSP Ultimate Screenshot Painter, specifically versionCode 240213.009, is vulnerable to an insecure permission issue. An attacker can exploit this flaw by providing a crafted content URI to the application, enabling them to move or overwrite files within the private storage directories of other users. No patch or fixed version has been disclosed by the vendor in the initial advisory.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized modification of sensitive files or data residing in private application storage, potentially leading to data loss or integrity compromise for other users on the same device.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Android devices currently running USP Ultimate Screenshot Painter version 240213.009.\u003c/li\u003e\n\u003cli\u003eImplement mobile device management (MDM) policies to restrict the application if it is deemed high-risk to the environment.\u003c/li\u003e\n\u003cli\u003eMonitor the vendor's official channels for a security patch addressing CVE-2026-107042 and upgrade immediately upon release.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T21:07:45Z","date_published":"2026-10-29T21:07:45Z","id":"https://feed.craftedsignal.io/briefs/2026-10-usp-ultimate-screenshot-painter/","summary":"USP Ultimate Screenshot Painter version 240213.009 contains an insecure permission flaw that allows unauthorized actors to move or overwrite files in private storage via crafted content URIs.","title":"USP Ultimate Screenshot Painter: Insecure file permission handling (CVE-2026-107042)","url":"https://feed.craftedsignal.io/briefs/2026-10-usp-ultimate-screenshot-painter/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:usp:ultimate_screenshot_painter:240213.009:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}