Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is due to a logic error in the code. An attacker can exploit the vulnerability to elevate privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to cause a local privilege escalation...

Google Android wbrc_bt_dev_write function out-of-bounds write vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds write vulnerability, which stems from a lack of bounds checking in the wbrcbtdevwrite function of the wbregoncoordinator.c file, which can be exploited by an attacker to cause an...

CVE-2025-0435

Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

CVE-2025-0435

Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

Google Android resizeToAtLeast elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which stems from an integer overflow in the resizeToAtLeast function of the SkRegion.cpp file, which may be subject to out-of-bounds writes. A local attacker can exploit th...

CVE-2024-53931

The com.glitter.caller.screen (also known as iCaller, Caller Theme & Dialer ) application for Android, version 1.1 and earlier , contains a vulnerability that allows any application to place phone calls without user interaction. This is caused by the com.glitter.caller.screen.DialerActivity compo...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash (also known as Color Call Theme & Call Screen ) application for Android, version 1.0.7 and earlier , contains a vulnerability that allows any application to place phone calls without user interaction. This is achieved by sending a crafted intent to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that stems from a possible biometric bypass. No details of the vulnerability are provided at this time...

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

Cybersecurity researchers have discovered a novel surveillance program that's suspected to be used by Chinese police departments as a lawful intercept tool to gather a wide range of information from mobile devices. The Android tool, codenamed EagleMsgSpy by Lookout, has been operational since at...

CVE-2024-49057

CVE-2024-49057 affects Microsoft Defender for Endpoint on Android. The issue is due to insufficient input validation in the Defender Android component, enabling remote spoofing by an attacker. CVSS v3.1 base score 8.1 (HIGH); impacts: confidentiality and integrity HIGH, availability NONE. No fix ...

Pixel Update Bulletin—December 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-12-05 or later address all issues in this bulletin and all issues in the December 2024 Android...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that originates from the presence of uninitialized data in BnAudioPolicyService::onTransact in the IAudioPolicyService.cpp file, which could lead ...

Mozilla Thunderbird < 133.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 133.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-67 advisory. - A double-free issue could have occurred in secpkcs7decoderstartdecrypt when handling an error path. Unde...

CVE-2024-52614

CVE-2024-52614 affects the Android app “Kura Sushi Official App Produced by EPARK” prior to version 3.8.5. The root cause is use of a hard-coded cryptographic key (CWE-321), enabling a local attacker to obtain login IDs and passwords. A fix is available in version 3.8.5; users should update to th...

CVE-2018-9428

In startDevice of AAudioServiceStreamBase.cpp there is a possible out of bounds write due to a use after free. This could lead to local arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation...

Google Android elevation of privilege vulnerability (CNVD-2024-49503)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to elevate privileges...

CVE-2024-44100

Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545...

Wear OS Security Bulletin—September 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2024-09-05 or later from the September 2024 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...