Google Android elevation of privilege vulnerability (CNVD-2024-37968)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an insecure default value in FooterActionsViewModel ktonForegroundServiceButtonClicked. An attacker can exploit this vulnerability to elevate...

Mozilla Firefox for Android Security Bypass Vulnerability (CNVD-2024-36716)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for Android, which is caused due to a selection option that obscures security prompts. An attacker could exploit the vulnerability to trick use...

Pixel Watch Security Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-07-05 or later address all applicable issues in the July 2024 Android Security Bulletin and all issues in this bulletin. T...

Pixel Update Bulletin—August 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-08-05 or later address all issues in this bulletin and all issues in the August 2024 Android...

Security Advisory CVE-2024-37403 (Dirty Stream) for Ivanti Docs@Work for Android

Created Date Jul 16, 2024 4:15:18 PM...

The vulnerability of the Android operating system on Pixel phones, related to logical operator precedence errors, allows attackers to escalate their privileges.

The vulnerability of the Android operating system on Pixel phones is related to a logical operator precedence error. Exploiting this vulnerability can allow attackers to enhance their privileges...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from a race condition in the UnrefAndMaybeDestroy method of the pmr.c file, which could lead to arbitrary code execution...

Exploit for Special Element Injection in Google Android

CVE 2024 0044 CVE-2024-0044, identified in the createSessionI...

Mozilla Firefox for Android Security Bypass Vulnerability (CNVD-2024-36725)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for Android, which can be exploited by attackers to bypass security restrictions...

CVE-2024-31974

The com.solarized.firedown aka Solarized FireDown Browser & Downloader application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately...

Pixel Watch Security Bulletin—May 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-05-05 or later address all applicable issues in the May 2024 Android Security Bulletin and all issues in this bulletin. To...

CVE-2023-38301

A security vulnerability exists in a third-party component related to vendor.gsm.serial affecting multiple Android devices, including BLU View 2 , Boost Mobile Celero 5G , Sharp Rouvo V , Motorola Moto G Pure , Motorola Moto G Power , T-Mobile Revvl 6 Pro 5G , and T-Mobile Revvl V+ 5G . The issue...

CVE-2023-38298

Various software builds for the following TCL devices 30Z, A3X, 20XE, 10L leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining non-resettable device...

TECNO HiOS 安全漏洞

TECNO HiOS is a customized user interface for Android-based operating systems from TECNO. A security vulnerability exists in TECNO HiOS version 13.0.0, which originates from the system application com.transsion.kolun.aiservice component not performing authentication checks...

Pixel Watch Security Bulletin—April 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-04-05 or later address all applicable issues in the April 2024 Android Security Bulletin and all issues in this bulletin. ...

Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Google has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies. The high-severity zero-day vulnerabilities are as follows - CVE-2024-29745 - An information disclosure flaw in the bootloader component CVE-2024-29748 - A...

CVE-2024-20839

Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers to access recording files on the lock screen...

Android banking trojans: How they steal passwords and drain bank accounts

For the most popular operating system in the world—which is Android and it isn’t even a contest—there’s a sneaky cyberthreat that can empty out a person’s bank accounts to fill the illicit coffers of cybercriminals. These are “Android banking trojans,” and, according to our 2024 ThreatDown State ...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in System that could lead to local privilege escalation...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a security vulnerability that stems from a vulnerability in Media Codecs...