Lucene search
K

5 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-3836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a...

5.5CVSS6.3AI score0.00105EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:0 a.m.2 views

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SurfaceFlinger component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.00078EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2017/04/10 12:0 a.m.2 views

Google Android SurfaceFlinger Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and SurfaceFlinger is a plug-in that manages the surface of the application. An elevation of privilege vulnerability exists in Google Android SurfaceFlinger. An attacker can explo...

9.3CVSS7.7AI score0.00078EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2016/08/23 12:0 a.m.4 views

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the SurfaceFlinger service in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially created application associated with the default...

4.3CVSS6.2AI score0.00105EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2016/08/05 8:59 p.m.1 views

CVE-2016-3836

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

5.5CVSS7.3AI score0.00105EPSS
Exploits0References3
Rows per page
Query Builder