{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/share-to-clipboard/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:share_to_clipboard_project:share_to_clipboard:1.14.1:*:*:*:*:android:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-107026"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Share to Clipboard (1.14.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Share to Clipboard"],"content_html":"\u003cp\u003eCVE-2026-107026 describes an insecure permission vulnerability in the Android application \u0026quot;Share to Clipboard\u0026quot; version 1.14.1 (versionCode 32). This flaw permits an unauthorized actor to perform unauthorized writes to the system clipboard, effectively allowing them to overwrite data stored by other users on the same device. The impact is primarily a compromise of the clipboard's integrity and potential information manipulation or injection.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthorized party to overwrite clipboard data, which could be leveraged to replace legitimate content with malicious links, credentials, or other payloads intended for the victim to paste inadvertently.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all devices within the environment that have \u0026quot;Share to Clipboard\u0026quot; version 1.14.1 (versionCode 32) installed.\u003c/li\u003e\n\u003cli\u003eRemove or restrict the usage of the affected application until a vendor-provided update is confirmed.\u003c/li\u003e\n\u003cli\u003eImplement mobile device management (MDM) policies to audit or block applications with insecure local IPC (Inter-Process Communication) permissions.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-30T01:10:12Z","date_published":"2026-10-30T01:10:12Z","id":"https://feed.craftedsignal.io/briefs/2026-10-share-to-clipboard-vulnerability/","summary":"An insecure permission vulnerability in Share to Clipboard version 1.14.1 allows unauthorized local attackers to arbitrarily overwrite the clipboard content of other users on the device.","title":"Share to Clipboard: Insecure permissions clipboard overwrite (CVE-2026-107026)","url":"https://feed.craftedsignal.io/briefs/2026-10-share-to-clipboard-vulnerability/"}],"language":"en","title":"CraftedSignal Threat Feed - Share to Clipboard","version":"https://jsonfeed.org/version/1.1"}