---
id: "CVE-2026-107015"
kind: "vulnerability"
aliases: ["CVE-2026-107015"]
title: "Simple Contacts Pro: insecure permissions expose another user's notes to attackers"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["android", "other", "simple-contacts-pro"]
not_affected_if: []
published_at: "2026-10-29T15:17:15+00:00"
first_seen_at: "2026-10-29T15:25:38+00:00"
updated_at: "2026-10-29T15:27:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107015", "first_seen_at": "2026-10-29T15:25:38+00:00"}]
---

# Simple Contacts Pro: insecure permissions expose another user's notes to attackers

Simple Contacts Pro, versionCode 107, has insecure file or data permissions. An unauthorized attacker can read and write notes stored in another user's note database.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Simple Contacts Pro version against versionCode 107 (unknown how the sources expect this to be read on Android)

## Timeline

- 2026-10-29T15:25:38+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107015

## From the sources

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_