CVE-2026-107042: High severity vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted content URI.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthorized attacker can exploit it without authentication or user interaction, provided they can supply a crafted content URI to the affected application.

What is the impact of successful exploitation?

The attacker can move or overwrite files in another user's private storage. The reported impact affects integrity; no confidentiality or availability impact is listed.

Which release is identified as affected?

The issue is reported in USP Ultimate Screenshot Painter versionCode 240213.009.

CVE-2026-107042: High severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which release is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which release is identified as affected?