Microsoft: Third-Party Android Vulnerability Leaves Over 50M Users Exposed
2026-04-11T08:51:55Z•9a0f2c04a9889858d4ddc7d81f0e75c519cf4f82e9c7a10d8e71c10aaa8e3bc4
CVE-2026-5281active-exploitationadobe-acrobatandroidbluehammerchromedata-breachengagelab-sdkfbi-breachforticlient-emsfortinetgoogle-play-novoicehasbro-incidentiphone-scamphishingqr-code-scamthird-party-riskwindowszero-day
What happened
TechRepublic roundup of high‑impact security incidents and active threats: a third‑party EngageLab Android SDK bug exposed data for ~50M users enabling malicious apps to abuse trusted permissions; a Chrome zero‑day (CVE‑2026‑5281) is being actively exploited and patched; a publicly released Windows ‘BlueHammer’ zero‑day grants SYSTEM access across potentially >1B devices with no patch yet; Fortinet’s FortiClient EMS has a critical zero‑day under active exploitation allowing authentication bypass and remote command execution; Adobe Acrobat PDF zero‑day exploitation has been observed for months,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- techrepublic_security
- Record identifier
- 9a0f2c04a9889858d4ddc7d81f0e75c519cf4f82e9c7a10d8e71c10aaa8e3bc4
- Enrichment time
- 2026-04-11T08:51:55Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.