133 matches found
Android Security Bulletin—October 2019Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-10-06 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...
Google Warns of Android Zero-Day Bug Under Active Attack
Google is warning of an Android zero-day flaw actively being exploited in the wild, which gives an attacker full control over 18 phone models including its flagship Pixel handset and devices made by Samsung, Huawei and Xiaomi. Google’s Project Zero warned late Thursday that it suspected the...
New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild
Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world's most widely used mobile operating system, Android. What's more? The Android zero-day vulnerability has also been found to be exploited in the wild by the Israeli surveillance vendor NSO...
Exploit for Use After Free in Google Android
CVE-2019-2215 Copy and pasted from: https:/...
CVE-2019-2215
creationtimestamp| type| source ---|---|--- 2019-10-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47463 2019-10-04 05:41:24+00:00| exploited| https://t.me/androidMalware/422 2019-10-06 19:14:11+00:00| seen| Telegram/-j8UgE87NOECrqZ3KDP0NkvSl22TTLP3GgkgXUff5ahF4 2019-10-06...
Google Android Binder CVE-2019-2215 Local Privilege Escalation Vulnerability
Description Google Android is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges. Technologies Affected Google Android 10.0 Google Android 9.0 Google Pixel 2 Recommendations Permit local access for trusted individuals only. Wher...
Android Binder Use-After-Free Exploit
This module exploits CVE-2019-2215, which is a use-after-free in Binder in the Android kernel. The bug is a local privilege escalation vulnerability that allows for a full compromise of a vulnerable device. If chained with a browser renderer exploit, this bug could fully compromise a device throu...
CVE-2018-2215
CVE-2018-2215 is rejected and does not represent an active vulnerability entry.
CVE-2012-2215
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/zenworksprebootfileaccess.rb 2018-05-29 15:50:33+00:00| seen|...
CVE-2017-2215
The CVE-2017-2215 entry concerns the Installer for the National Tax Agency’s "Setup file of advance preparation" (jizen_setup.exe). Connected sources confirm an untrusted DLL search path vulnerability in the installer, which could allow arbitrary code execution with the privileges of the invoking...
CVE-2017-2215
Untrusted search path vulnerability in Installer of "Setup file of advance preparation" jizensetup.exe The version which was available on the website prior to 2017 June 12 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2014-2215
This CVE entry CVE-2014-2215 is rejected/not used per the Initial Description.
CVE-2015-2215
Open redirect vulnerability in the Services single sign-on server helper servicesssoserverhelper module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...
CVE-2015-2215
The CVE-2015-2215 entry concerns Drupal’s Services single sign-on server helper module. The vulnerability is an open redirect: the module fails to validate some user-supplied URLs in redirect parameters, allowing remote attackers to redirect users to arbitrary sites and facilitate phishing. Affec...
openSUSE Security Update : flash-player (openSUSE-SU-2010:0502-1)
Flash Player was updated to version 10.1.82.76 fixing several critical security issues. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE2010-2215, CVE-2010-2216 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
openSUSE Security Update : acroread (openSUSE-SU-2010:0573-1)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240, CVE-2010-2862. This update also incorporate the Adobe Flash Player update APSB10-16 for the bundled flash player parts CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,...
Ubuntu: Security Advisory (USN-2215-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...