Lucene search
K

44 matches found

OSV
OSV
added 2026/03/02 7:16 p.m.8 views

CVE-2026-0047

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.9AI score0.00138EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 6:43 p.m.6 views

CVE-2026-0047

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00138EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/02 6:43 p.m.20 views

CVE-2026-0047

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00138EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/01 12:0 a.m.7 views

PT-2026-22683

Name of the Vulnerable Software and Affected Versions ActivityManagerService affected versions not specified Description A flaw exists in the dumpBitmapsProto function within ActivityManagerService.java that may allow an application to access private information because of a missing permission...

8.4CVSS6.2AI score0.00138EPSS
Exploits1References10
OSV
OSV
added 2026/03/01 12:0 a.m.16 views

ASB-A-465136263

In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00138EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:14 p.m.3 views

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.8AI score0.00091EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:18 a.m.4 views

CVE-2021-0321

In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

5.5CVSS5.5AI score0.00153EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/08 4:57 p.m.4 views

CVE-2025-48627

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

6.5AI score0.00076EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:20 a.m.4 views

CVE-2023-21292

In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.5AI score0.0009EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:9 a.m.7 views

CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00113EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:49 a.m.4 views

CVE-2023-21496

Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level...

6.1CVSS6.9AI score0.00176EPSS
Exploits0References1
OSV
OSV
added 2024/11/28 1:15 a.m.2 views

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00091EPSS
Exploits0References1
CNVD
CNVD
added 2024/09/30 12:0 a.m.5 views

Huawei HarmonyOS/EMUI Permission Issues Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS/EMU...

5.6CVSS6.7AI score0.00111EPSS
Exploits0References1
OSV
OSV
added 2024/09/27 11:15 a.m.0 views

CVE-2024-47291

Permission vulnerability in the ActivityManagerService AMS module Impact: Successful exploitation of this vulnerability may affect availability...

5.5CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/09/27 12:0 a.m.3 views

PT-2024-32503 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permission vulnerability in the ActivityManagerService AMS module. Successful exploitation of this vulnerability may affect availability. There is no information...

5.6CVSS6.9AI score0.00111EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.4 views

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS/EMU...

5.6CVSS6.6AI score0.00111EPSS
Exploits0References2
OSV
OSV
added 2024/05/07 9:15 p.m.3 views

CVE-2024-0025

In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.3 views

PT-2024-14707 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue concerns a vulnerability in the ActivityManagerService AMS module related to starting activities in the background. Successful exploitation of this vulnerability will affect...

7.5CVSS6.9AI score0.0035EPSS
Exploits0References4
OSV
OSV
added 2024/01/16 9:15 a.m.2 views

CVE-2023-52108

Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability...

7.5CVSS5.8AI score0.00379EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.4 views

PT-2023-18081 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to side channel information disclosure in ActivityManagerService, allowing an attacker to determine whether an app is installed without query permissions. This could le...

5.5CVSS5.3AI score0.00086EPSS
Exploits0References4
Rows per page
Query Builder