CVE-2020-0425

There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124000380...

CVE-2020-0395

In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Android elevation of privilege vulnerability (CNVD-2021-30158)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components.VPN is one of the VPN Virtual Private Network components.Email is one of the email components. Android/Pixel has a security vulnerability that...

Google Android elevation of privilege vulnerability (CNVD-2021-30157)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components.VPN is one of the VPN Virtual Private Network components.Email is one of the email components. A security vulnerability exists in Android/Pixel th...

Google Android has an unspecified vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Bluetooth BR/EDR is a Bluetooth BR/EDR Basic Rate/Enhanced Data Rate standard from Google and the Open Handset Alliance OHA. COVIDSafe app is a coronavirus contact tracing application from Google a...

Unspecified Vulnerability in Google Android (CNVD-2021-30161)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA.Framework is an Android framework component.System is a system component.Broadcom Bluetooth is a Bluetooth component.Wi-Fi is a wireless Internet component.USB driver is a Universal Serial Bus USB...

Mozilla Firefox ESR Resource Management Error Vulnerability (CNVD-2020-46332)

Mozilla Firefox ESR is an extended support release of Firefox web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.11 for Android-based platforms. The vulnerability can be exploited by an attacker with the help o...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-46331)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the Content Provider in versions of Mozilla Firefox prior to 68.10.1 for Android-based platforms. An attacker can exploit the vulnerability to read local files and...

Code injection

Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings but not access the previous profile. Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2020-44361)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-44372)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 10, which can be exploited by attackers to obtain information...

CVE-2020-6506

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-38177)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by attackers to bypass Factory Reset Protection FRP with the help of KNOX API...

Google Android System Remote Code Execution Vulnerability (CNVD-2020-43681)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in Google Android System. The vulnerability can be exploited by a remote attacker to execute code...

CVE-2020-0134

In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-32796)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A security vulnerability exists in Samsung mobile devices, which can be exploited by attackers to access Music Share...

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32935)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

New Android Flaw Affecting Over 1 Billion Phones Let Attackers Hijack Apps

Remember Strandhogg? A security vulnerability affecting Android that malicious apps can exploit to masquerade as any other app installed on a targeted device to display fake interfaces to the users, tricking them into giving away sensitive information. Late last year, at the time of its public...

CVE-2020-0096

creationtimestamp| type| source ---|---|--- 2020-05-15 00:34:10+00:00| seen| https://t.me/cibsecurity/12088 2020-05-26 16:47:59+00:00| exploited| https://t.me/thehackernews/709 2020-05-26 17:03:25+00:00| seen| https://t.me/arvinclub/2252 2020-05-26 20:06:54+00:00| seen| https://t.me/truesecator/6...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30172)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to bypass the lock state protection mechanism...