14412 matches found
CVE-2023-21083
CVE-2023-21083 affects Android, specifically the onNullBinding path in CallScreeningServiceHelper.java. The root cause is a permissions bypass that can enable recording audio without a privacy indicator, allowing local elevation of privilege with user privileges and no user interaction required. ...
CVE-2023-21099
In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-21081
In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
CVE-2023-20909
In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...
CVE-2023-21083
In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...
CVE-2023-21098
In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-20950
CVE-2023-20950 affects Android (Android-11, Android-12, Android-12L) in AlarmManagerActivity.java, enabling a bypass of background activity launch restrictions via a pendingIntent. This could cause local elevation of privilege with no additional privileges or user interaction required. The Androi...
CVE-2023-21085
CVE-2023-21085 involves Android’s System component where a missing bounds check in function nci_snd_set_routing_cmd (in file nci_hmsgs.cc ) can cause an out-of-bounds write. This flaw could enable remote code execution with no privileges and no user interaction, by an attacker in proximal/adjacen...
CVE-2022-45836
creationtimestamp| type| source ---|---|--- 2023-04-18 18:29:13+00:00| seen| https://t.me/cibsecurity/62356 2026-02-12 21:03:11+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meovccickb2q...
SUSE: Security Advisory (SUSE-SU-2023:1856-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-2098
creationtimestamp| type| source ---|---|--- 2023-04-15 16:26:44+00:00| seen| https://t.me/cibsecurity/62228 2023-12-10 11:18:27+00:00| seen| https://t.me/arpsyndicate/1604...
plastmetal.cz Cross Site Scripting vulnerability OBB-3259567
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-30524
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:29+00:00| seen| https://t.me/cibsecurity/61998...
CVE-2023-30518
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:22+00:00| seen| https://t.me/cibsecurity/61993...
CVE-2023-30526
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:20+00:00| seen| https://t.me/cibsecurity/61991...
CVE-2023-30529
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:19+00:00| seen| https://t.me/cibsecurity/61990...
CVE-2023-30516
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:18+00:00| seen| https://t.me/cibsecurity/61989...
CVE-2023-30523
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:14+00:00| seen| https://t.me/cibsecurity/61988...