cve.bz

google vulnerabilities, newest first, page 184

Filter
  1. 7.5CVE-2021-39716EPSS 0.4%

    Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A

  2. 4.4CVE-2021-39715EPSS 0.1%

    In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed…

  3. 7.8CVE-2021-39714EPSS 0.2%

    In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio…

  4. 7.0CVE-2021-39713EPSS 0.2%

    Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

  5. 6.4CVE-2021-39712EPSS 0.09%

    In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: An…

  6. 4.4CVE-2021-39711EPSS 0.2%

    In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploit…

  7. 9.8CVE-2021-39710EPSS 0.5%

    Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A

  8. 7.8CVE-2021-39709EPSS 0.1%

    In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interactio…

  9. 9.8CVE-2021-39708EPSS 1.2%

    In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not…

  10. 7.8CVE-2021-39707EPSS 0.1%

    In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User…

  11. 7.8CVE-2021-39706EPSS 0.7%

    In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. Us…

  12. 7.8CVE-2021-39704EPSS 0.2%

    In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a permissions bypass. This could lead to local escalation of privilege with no additio…

  13. 7.8CVE-2021-39703EPSS 0.1%

    In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

  14. 7.8CVE-2021-39702EPSS 0.3%

    In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execut…

  15. 7.8CVE-2021-39701EPSS 0.4%

    In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission due to improper input validation. This could lead to local escalation of privileg…

  16. 7.8CVE-2021-39698EPSS 0.2%

    In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita…

  17. 7.8CVE-2021-39697EPSS 0.1%

    In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permission check. This could lead to local escalation of privilege with User execution …

  18. 7.8CVE-2021-39695EPSS 0.1%

    In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for ex…

  19. 7.8CVE-2021-39694EPSS 0.1%

    In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges ne…

  20. 7.8CVE-2021-39693EPSS 0.1%

    In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges n…

  21. 7.8CVE-2021-39692EPSS 0.7%

    In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. Use…

  22. 5.5CVE-2021-39690EPSS 0.1%

    In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User inter…

  23. 6.7CVE-2021-39689EPSS 0.1%

    In multiple functions of odsign_main.cpp, there is a possible way to persist system attack due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not …

  24. 7.0CVE-2021-39686EPSS 0.2%

    In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i…

  25. 7.8CVE-2021-39685EPSS 0.5%

    In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…

  26. 6.5CVE-2021-39667EPSS 0.7%

    In ih264d_parse_decode_slice of ih264d_parse_slice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction …

  27. 5.5CVE-2021-39624EPSS 0.1%

    In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: Andro…

  28. 7.8CVE-2021-0957EPSS 0.1%

    In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local escalation of privilege with no additional execution privileges needed. User inte…

  29. 6.2CVE-2022-25822EPSS 0.09%

    An use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.

  30. 7.1CVE-2022-25821EPSS 0.1%

    Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read.

  31. 4.6CVE-2022-25820EPSS 0.1%

    A vulnerable design in fingerprint matching algorithm prior to SMR Mar-2022 Release 1 allows physical attackers to perform brute force attack on screen lock password.

  32. 5.5CVE-2022-25819EPSS 0.1%

    OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory.

  33. 9.8CVE-2022-25818EPSS 0.4%

    Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution.

  34. 3.3CVE-2022-25817EPSS 0.1%

    Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.

  35. 4.6CVE-2022-25816EPSS 0.1%

    Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication

  36. 7.8CVE-2022-25815EPSS 0.1%

    PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

  37. 7.8CVE-2022-25814EPSS 0.1%

    PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

  38. 4.6CVE-2022-24932EPSS 0.1%

    Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.

  39. 7.8CVE-2022-24931EPSS 0.1%

    Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission

  40. 3.3CVE-2022-24929EPSS 0.1%

    Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication.

  41. 7.8CVE-2022-24928EPSS 0.1%

    Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.

  42. 6.6CVE-2022-20060EPSS 0.1%

    In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution p…

  43. 6.6CVE-2022-20059EPSS 0.1%

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

  44. 6.6CVE-2022-20058EPSS 0.1%

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

  45. 6.5CVE-2022-20057EPSS 0.1%

    In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS06271186; …

  46. 6.6CVE-2022-20056EPSS 0.1%

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

  47. 6.8CVE-2022-20055EPSS 0.1%

    In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges nee…

  48. 7.8CVE-2022-20054EPSS 0.2%

    In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. P…

  49. 7.8CVE-2022-20053EPSS 0.1%

    In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation…

  50. 5.5CVE-2022-20051EPSS 0.1%

    In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploi…