CVE-2026-107024
Deferred Deferred - Pending Action

Insecure Clipboard Overwrite in Share 2 Archive Today

Vulnerability report for CVE-2026-107024, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: MITRE

Description

Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content via supplying a crafted URL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves an insecure permission setting in Share 2 Archive Today version 61 for Android. An exported activity named ClipboardActivity can overwrite a user's clipboard content with a supplied URL without user confirmation or validation. The activity is invisible to the user and requires no permissions to trigger, making it exploitable by any app on the same device.

Detection Guidance

Check for apps with exported activities that handle clipboard operations. Inspect installed apps for components like ClipboardActivity in Share 2 Archive Today. Use Android debugging tools to monitor intent broadcasts and clipboard changes.

Impact Analysis

An attacker could silently replace your clipboard content with a malicious URL. This could trick you into visiting harmful websites, downloading malware, or exposing sensitive data if you paste the URL into other applications. The attack requires only a zero-permission app on your device.

Mitigation Strategies

Uninstall Share 2 Archive Today version 61. Disable the app if uninstallation is not possible. Avoid installing untrusted apps that could exploit this via intent broadcasts. Monitor clipboard behavior for unexpected changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107024. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart