cve.bz

google vulnerabilities, newest first, page 176

Filter
  1. 7.8CVE-2022-20194EPSS 0.1%

    In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android…

  2. 7.3CVE-2022-20193EPSS 0.1%

    In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the code. This could lead to local escalation of privilege by conflating apps with User execution priv…

  3. 7.8CVE-2022-20192EPSS 0.1%

    In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to local escalation of privilege with no additional execution …

  4. 9.8CVE-2022-20191EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A

  5. 7.5CVE-2022-20190EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A

  6. 7.5CVE-2022-20188EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A

  7. 7.8CVE-2022-20186EPSS 0.5%

    In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …

  8. 6.7CVE-2022-20185EPSS 0.1%

    In TBD of TBD, there is a possible use after free bug. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi…

  9. 7.5CVE-2022-20184EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A

  10. 6.7CVE-2022-20183EPSS 0.1%

    In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed …

  11. 4.4CVE-2022-20182EPSS 0.1%

    In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interact…

  12. 7.5CVE-2022-20181EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A

  13. 7.5CVE-2022-20179EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A

  14. 6.7CVE-2022-20178EPSS 0.1%

    In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…

  15. 7.5CVE-2022-20177EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A

  16. 4.4CVE-2022-20176EPSS 0.1%

    In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for ex…

  17. 7.5CVE-2022-20175EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A

  18. 4.4CVE-2022-20174EPSS 0.1%

    In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exp…

  19. 9.8CVE-2022-20173EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A

  20. 5.5CVE-2022-20172EPSS 0.1%

    In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…

  21. 9.8CVE-2022-20171EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A

  22. 9.8CVE-2022-20170EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A

  23. 7.5CVE-2022-20169EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A

  24. 7.5CVE-2022-20168EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A

  25. 9.8CVE-2022-20167EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A

  26. 6.7CVE-2022-20166EPSS 0.2%

    In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for …

  27. 4.4CVE-2022-20165EPSS 0.1%

    In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Prod…

  28. 9.8CVE-2022-20164EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A

  29. 4.4CVE-2022-20162EPSS 0.1%

    In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit…

  30. 9.8CVE-2022-20160EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A

  31. 4.4CVE-2022-20159EPSS 0.1%

    In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is n…

  32. 7.8CVE-2022-20156EPSS 0.1%

    In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…

  33. 7.0CVE-2022-20155EPSS 0.09%

    In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. U…

  34. 6.4CVE-2022-20154EPSS 0.1%

    In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: A…

  35. 6.7CVE-2022-20153EPSS 0.1%

    In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed fo…

  36. 6.7CVE-2022-20152EPSS 0.1%

    In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: A…

  37. 7.5CVE-2022-20151EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A

  38. 7.5CVE-2022-20149EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A

  39. 6.4CVE-2022-20148EPSS 0.1%

    In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: And…

  40. 7.8CVE-2022-20147EPSS 0.1%

    In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n…

  41. 5.5CVE-2022-20146EPSS 0.1%

    In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interact…

  42. 9.8CVE-2022-20145EPSS 7.2%

    In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional executio…

  43. 7.8CVE-2022-20144EPSS 0.2%

    In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges…

  44. 5.5CVE-2022-20143EPSS 0.1%

    In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for …

  45. 7.8CVE-2022-20142EPSS 0.2%

    In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User inter…

  46. 7.0CVE-2022-20141EPSS 0.1%

    In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interacti…

  47. 9.8CVE-2022-20140EPSS 8.7%

    In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  48. 7.8CVE-2022-20138EPSS 0.2%

    In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFILE_PROVISIONED intent due to a missing permission check. This could lead to local escalation of pri…

  49. 7.8CVE-2021-39806EPSS 0.1%

    In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege during startup of servicemanager, if an attacker can trigger an initialization failure,…

  50. 7.3CVE-2022-20137EPSS 0.1%

    In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing permission check. This could lead to local escalation of privilege with User execution privileges …