PT-2024-7088

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 130.0.6723.58 Microsoft Edge affected versions not specified Description The issue is related to an inappropriate implementation in WebAuthentication, allowing a local attacker to perform privilege escalation vi...

PT-2024-28493 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a missing bounds check in the drm service, which could lead to a local denial of service. This requires System execution privileges. Recommendations: At the...

PT-2025-3748 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in a component of the Android operating system framework. This could allow an attacker to elevate their privileges. There is a potentia...

Google Android elevation of privilege vulnerability (CNVD-2024-45227)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is due to a race condition in DevmemIntPFNotify in device memserver.c. An attacker can exploit this vulnerability to escalate privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that originates from the getConfig method in the SoftVideoDecoderOMXComponent.cpp file contains a heap buffer overflow that could result in an...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the addPreferencesForType method in the AccountTypePreferenceLoader.java file contains a proxy confusion with a possible way to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a lack of checking for FRP status in wifiitemeditcontent in styles.xml. An attacker can exploit this vulnerability to escalate privileg...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the scheme method in the Uri.java file contains an input validation that is incorrect, and there is a possible way to make an...

PT-2024-26325 · Ibm · Ibm Maas360

Name of the Vulnerable Software and Affected Versions: IBM MaaS360 for Android versions 6.31 through 8.60 Description: The issue concerns hardcoded credentials in IBM MaaS360 for Android that can be obtained by a user with physical access to the device. This allows unauthorized access to the...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge for Android suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Google Android elevation of privilege vulnerability (CNVD-2024-37969)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the setTransactionState code of SurfaceFlinger.cpp, which can be exploited by an attacker to escalate privileges...

Google Android elevation of privilege vulnerability (CNVD-2024-36735)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from an integer overflow in MMUAllocLevel in mmucommon.c. The vulnerability can be exploited to escalate privileges and execute arbitrary code. ...

Google Android elevation of privilege vulnerability (CNVD-2024-36096)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Google Android elevation of privilege vulnerability (CNVD-2024-36098)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Google Android Out-of-Bounds Read Vulnerability (CNVD-2024-37973)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability caused by a heap buffer overflow in sdpucompareuuidwithattr in sdputils.cc. An attacker can exploit this vulnerability to obtain sensitive information...

Exploit for CVE-2021-4191

This repository contains a collection of exploits and proof-of-concept POC code for various vulnerabilities, including a high-severity vulnerability in Android versions 12 and 13 CVE-2024-0044, an unauthenticated remote command execution RCE vulnerability in BYOB Build Your Own Botnet v2.0.0, and...

PT-2024-24982 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible use after free due to improper locking in the sendDeviceState 1 6 function of RadioExt.cpp. This could lead to local...

PT-2024-26152 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A logic error in the setForceHideNonSystemOverlayWindowIfNeeded function of WindowState.java allows message content to be visible on the screensaver while lock screen visibility setting...

Exploit for Special Element Injection in Google Android

CVE-2024-0044 Overview CVE-2024-0044 is a vulnerabili...

A week in security (August 5 – August 11)

Last week on Malwarebytes Labs: Security company ADT announces security breach of customer data Stolen data from scraping service National Public Data leaked online Android vulnerability used in targeted attacks patched by Google Men report more pressure and threats to share location and accounts...