{"id":"CVE-2026-107015","aliases":[],"cve":{"records":[{"id":"CVE-2026-107015","source":"mitre","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-07T00:00:00.000Z","published":"2026-10-29T00:00:00.000Z","modified":"2026-10-29T19:52:34.924Z"}],"publishers":[{"name":"mitre","role":"CNA","organizationId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","modified":"2026-10-29T14:41:25.197Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T19:52:34.924Z"}],"references":[{"url":"https://github.com/SimpleMobileTools/Simple-Contacts","tags":[],"source":"mitre"},{"url":"https://github.com/kanytu/Simple-Contacts/issues/628","tags":[],"source":"mitre"},{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CVE-2026-107016.md","tags":[],"source":"mitre"},{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CVE-2026-107016.md","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-284","description":"CWE-284 Improper Access Control","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T19:51:28.197390Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.","titleSource":"mitre","descriptionSource":"mitre","description":"Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.","score":9.1,"severity":"critical","published":"2026-10-29T00:00:00.000Z","modified":"2026-10-29T19:52:34.924Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"n/a","name":"n/a","platforms":[],"versions":[{"version":"n/a","status":"affected"}],"cpes":[],"source":"mitre","url":"https://www.cve.org/CVERecord?id=CVE-2026-107015"}],"remediation":[],"references":["https://github.com/SimpleMobileTools/Simple-Contacts","https://github.com/kanytu/Simple-Contacts/issues/628","https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CVE-2026-107016.md"],"sources":[{"name":"CVE","id":"CVE-2026-107015","modified":"2026-10-29T19:52:34.924Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-107015"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","score":9.1}],"sourceAffected":[],"observedAt":"2026-10-29T20:45:42.096Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:30:36.506Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T15:35:33.571Z","attemptedAt":"2026-10-29T15:35:33.571Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T15:35:33.922Z","attemptedAt":"2026-10-29T15:35:33.922Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T15:35:33.909Z","attemptedAt":"2026-10-29T15:35:33.909Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T15:35:33.724Z","attemptedAt":"2026-10-29T15:35:33.724Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-107015","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107015","modified":"2026-10-29T15:17:15.200","checkedAt":"2026-10-29T15:35:33.571Z"},{"source":"ENISA EUVD","id":"EUVD-2026-112928","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112928","modified":"Oct 29, 2026, 2:41:25 PM","checkedAt":"2026-10-29T15:35:33.909Z"},{"source":"GitHub Advisory Database","id":"GHSA-6cf3-9ppw-9w2c","url":"https://github.com/advisories/GHSA-6cf3-9ppw-9w2c","modified":"2026-10-29T15:30:59Z","checkedAt":"2026-10-29T15:35:33.922Z"}],"aiSummary":{"text":"Simple Contacts Pro versionCode 107 has insecure permissions, allowing unauthorized attackers to access another user's note database. The weakness is due to improper access control. Impact is limited to reading and writing notes.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:47:04.854Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-107015"}]}}