CVE Catalog

CVE-2026-15366

LowCVSS 2.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page.

Risk Assessment

Users may access private photos without proper restrictions, violating privacy and intended Kids Mode safeguards.

Recommendation

Fix the control logic to prevent viewing local gallery photos in Kids Mode without proper permissions.

Other vulnerabilities in Kids Mode

Original NVD description (English source)

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page

Vulnerability data from NVD (NIST) · CISA KEV · EPSS