Search
Find a vulnerability
Search criteria
5 vulnerabilities by GEO CORPORATION
CVE-2026-96614 (GCVE-0-2026-96614)
Vulnerability from nvd – Published: 2026-10-15 08:25 – Updated: 2026-10-15 14:19
VLAI
EPSS
VEX
Summary
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 14:19 UTC
CWE
- CWE-939 - Improper authorization in handler for custom URL scheme
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| GEO CORPORATION | "ゲオアプリ" for Android |
Affected:
0 , ≤ 11.8.6
(semver)
|
|
| GEO CORPORATION | "ゲオアプリ" for iOS |
Affected:
0 , ≤ 11.8.6
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-96614",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T14:19:37.028283Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T14:19:54.516Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for Android",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for iOS",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application\u0027s in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service\u0027s session ID."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-939",
"description": "Improper authorization in handler for custom URL scheme",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T08:25:39.167Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://play.google.com/store/apps/details?id=jp.co.geoonline.app\u0026hl=ja"
},
{
"url": "https://apps.apple.com/jp/app/id590190880"
},
{
"url": "https://jvn.jp/en/jp/JVN40460777/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-96614",
"datePublished": "2026-10-15T08:25:39.167Z",
"dateReserved": "2026-10-08T23:44:33.022Z",
"dateUpdated": "2026-10-15T14:19:54.516Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105271 (GCVE-0-2026-105271)
Vulnerability from nvd – Published: 2026-10-15 08:24 – Updated: 2026-10-15 18:28
VLAI
EPSS
VEX
Summary
"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 18:28 UTC
CWE
- CWE-312 - Cleartext storage of sensitive information
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| GEO CORPORATION | "ゲオアプリ" for Android |
Affected:
0 , ≤ 11.8.6
(semver)
|
|
| GEO CORPORATION | "ゲオアプリ" for iOS |
Affected:
0 , ≤ 11.8.6
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-105271",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T18:28:14.273936Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T18:28:26.549Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for Android",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for iOS",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "Cleartext storage of sensitive information",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T08:24:18.191Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://play.google.com/store/apps/details?id=jp.co.geoonline.app\u0026hl=ja"
},
{
"url": "https://apps.apple.com/jp/app/id590190880"
},
{
"url": "https://jvn.jp/en/jp/JVN40460777/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-105271",
"datePublished": "2026-10-15T08:24:18.191Z",
"dateReserved": "2026-10-08T23:44:32.066Z",
"dateUpdated": "2026-10-15T18:28:26.549Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-96614 (GCVE-0-2026-96614)
Vulnerability from cvelistv5 – Published: 2026-10-15 08:25 – Updated: 2026-10-15 14:19
VLAI
EPSS
VEX
Summary
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 14:19 UTC
CWE
- CWE-939 - Improper authorization in handler for custom URL scheme
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| GEO CORPORATION | "ゲオアプリ" for Android |
Affected:
0 , ≤ 11.8.6
(semver)
|
|
| GEO CORPORATION | "ゲオアプリ" for iOS |
Affected:
0 , ≤ 11.8.6
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-96614",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T14:19:37.028283Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T14:19:54.516Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for Android",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for iOS",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application\u0027s in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service\u0027s session ID."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-939",
"description": "Improper authorization in handler for custom URL scheme",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T08:25:39.167Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://play.google.com/store/apps/details?id=jp.co.geoonline.app\u0026hl=ja"
},
{
"url": "https://apps.apple.com/jp/app/id590190880"
},
{
"url": "https://jvn.jp/en/jp/JVN40460777/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-96614",
"datePublished": "2026-10-15T08:25:39.167Z",
"dateReserved": "2026-10-08T23:44:33.022Z",
"dateUpdated": "2026-10-15T14:19:54.516Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-105271 (GCVE-0-2026-105271)
Vulnerability from cvelistv5 – Published: 2026-10-15 08:24 – Updated: 2026-10-15 18:28
VLAI
EPSS
VEX
Summary
"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-15 18:28 UTC
CWE
- CWE-312 - Cleartext storage of sensitive information
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| GEO CORPORATION | "ゲオアプリ" for Android |
Affected:
0 , ≤ 11.8.6
(semver)
|
|
| GEO CORPORATION | "ゲオアプリ" for iOS |
Affected:
0 , ≤ 11.8.6
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-105271",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T18:28:14.273936Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T18:28:26.549Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for Android",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" for iOS",
"vendor": "GEO CORPORATION",
"versions": [
{
"lessThanOrEqual": "11.8.6",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "\"\u30b2\u30aa\u30a2\u30d7\u30ea\" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected application."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "Cleartext storage of sensitive information",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T08:24:18.191Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://play.google.com/store/apps/details?id=jp.co.geoonline.app\u0026hl=ja"
},
{
"url": "https://apps.apple.com/jp/app/id590190880"
},
{
"url": "https://jvn.jp/en/jp/JVN40460777/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-105271",
"datePublished": "2026-10-15T08:24:18.191Z",
"dateReserved": "2026-10-08T23:44:32.066Z",
"dateUpdated": "2026-10-15T18:28:26.549Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
JVNDB-2026-000149
Vulnerability from jvndb - Published: 2026-10-15 06:43 - Updated:2026-10-15 06:43
Severity
Summary
Multiple vulnerabilities in "GEO App"
Details
Mobile applications "GEO App" provided by GEO HOLDINGS CORPORATION contain multiple vulnerabilities listed below:
- Improper Authorization in Handler for Custom URL Scheme (CWE-939) - CVE-2026-96614
- Cleartext Storage of Sensitive Information (CWE-312) - CVE-2026-105271
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000149.html",
"dc:date": "2026-10-15T15:43+09:00",
"dcterms:issued": "2026-10-15T15:43+09:00",
"dcterms:modified": "2026-10-15T15:43+09:00",
"description": "Mobile applications \"GEO App\" provided by GEO HOLDINGS CORPORATION contain multiple vulnerabilities listed below:\u003ca href=\u0027https://cwe.mitre.org/data/definitions/939.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003ca href=\u0027https://cwe.mitre.org/data/definitions/312.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eImproper Authorization in Handler for Custom URL Scheme (CWE-939) - CVE-2026-96614\u003c/li\u003e\u003cli\u003eCleartext Storage of Sensitive Information (CWE-312) - CVE-2026-105271\u003c/li\u003e\u003c/ul\u003eCVE-2026-96614\r\nShunsuke Kaneko of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.\r\n\r\nCVE-2026-105271\r\nSoh Satoh reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000149.html",
"sec:cpe": [
{
"#text": "cpe:/a:misc:geo_geo_app_for_android",
"@product": "\"GEO App\" for Android",
"@vendor": "GEO CORPORATION",
"@version": "2.2"
},
{
"#text": "cpe:/a:misc:geo_geo_app_for_ios",
"@product": "\"GEO App\" for iOS",
"@vendor": "GEO CORPORATION",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "5.4",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2026-000149",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN40460777/index.html",
"@id": "JVN#40460777",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2026-96614",
"@id": "CVE-2026-96614",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2026-105271",
"@id": "CVE-2026-105271",
"@source": "CVE"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "Multiple vulnerabilities in \"GEO App\""
}