EUVD-2017-0848

Malware in sbrugna...

EUVD-2017-0768

Malware in sbrugna...

EUVD-2017-0767

Malware in sbrugna...

EUVD-2016-7619

Malware in sbrugna...

EUVD-2016-3507

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-0494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission...

Linux Distros Unpatched Vulnerability : CVE-2017-0476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and...

Linux Distros Unpatched Vulnerability : CVE-2017-0414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate...

CVE-2023-45779

In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this c...

CVE-2019-9440

In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37637796...

Android 15 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.

This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 15. Android 15 devices with a security patch level of 2024-09-01 or later are protected against these issues Android 15, as released on AOSP, will have...

Android Browser Open in New Tab Cookie Theft

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Browser "Open in New Tab" Cookie Theft', 'Description' = %q In Android's stock AOSP Browser application and WebView component, the "open ...

CVE-2023-45779

In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this c...

Privilege escalation

In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this c...

CVE-2023-45779

In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this c...

ASB-A-197260547

In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-30660

Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackers to access the UWB chipset Identifier...

CVE-2023-30660

The CVE-2023-30660 issue affects Samsung UwbAospAdapterService, with the vulnerable component being getDefaultChipId. It allows local attackers to access the UWB chipset Identifier on devices running versions prior to SMR Jul-2023 Release 1. According to PT-2023-22856, impact is exposure of sensi...

PT-2023-22856 · Unknown · Uwbaospadapterservice

Name of the Vulnerable Software and Affected Versions: UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 Description: The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the getDefaultChipId function. This...

PT-2023-22857 · Unknown · Uwbaospadapterservice

Name of the Vulnerable Software and Affected Versions: UwbAospAdapterService versions prior to SMR Jul-2023 Release 1 Description: The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the getChipInfos function...