The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge on Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge browsers on Android operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page from...

Mozilla Firefox for Android Elevation of Privilege Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from an elevation of privilege vulnerability that is caused by an immediate interaction with a privilege prompt. An attacker can exploit the vulnerability to gain...

Google Android elevation of privilege vulnerability (CNVD-2024-45233)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the code of comAndroid internalos ZygoteCommandBuffernativeForkRepeatly in comAndroid internalos Zygot CommandBuffer.cpp is caused ...

Google Android elevation of privilege vulnerability (CNVD-2024-39681)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates in the onCreate method of the multiple files file, which can be exploited to trick a user into granting health privileges via tapjacking. A...

CVE-2024-6605 Firefox Android missed activation delay to prevent tapjacking

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox 128...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android, which stems from improper validation of multiple method inputs in the ManagedServices.java file, and may exist a way to hide applications with...

PT-2024-26135 · Google · Android

Name of the Vulnerable Software and Affected Versions: MediaProvider.java affected versions not specified Description: The issue is related to improper input validation in the ensureFileColumns function of MediaProvider.java. This could lead to the disclosure of files owned by another user,...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which originates from a logic error in the DevmemIntChangeSparse2 method of the devicememserver.c file, where arbitrary code execution is possible...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which is caused by a resource exhaustion in the multiple method of the ShortcutService.java file, which may result in a persistent denial of servi...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to escalate privileges due to a logic error in the code in onDransact of ParcelableListBinder.java...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that originates from a race condition in the DevmemIntUnexportCtx method of the devicememserver.c file, where arbitrary code execution is possible...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a logic error in the code of the DevmemXIntUnreserveRange method of the devicememserver.c file, where arbitrary code execution is...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android that originates from a logic error in the DevmemIntFreeDefBackingPage method of the devicememserver.c file, which could lead to arbitrary code...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android, which stems from a lack of permission checking in the CompanionDeviceManagerService.java method, which may have a method to pair a companion devi...

PT-2024-23965

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to unsafe deserialization in multiple functions of ZygoteProcess.java, allowing code execution as any app via WRITE SECURE SETTINGS. This could lead to local escalation o...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which originates from a post-release reuse of the RGXCreateZSBufferKM method in the rgxta3d.c file, where arbitrary code execution is possible...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an authentication bypass vulnerability that stems from an incorrect protocol implementation in the smpprocrand method of the smpact.cc file, which can be exploited by an attacker to potentially...

Twilio Authy API Security Vulnerability

Twilio Authy API is an authorization interface from Twilio, Inc. It is used to build two-factor authentication, passwordless login and secure authorization for developers. A security vulnerability exists in Twilio Authy API for Android versions prior to 25.1.0, Twilio Authy API for iOS versions...

Exploit for Special Element Injection in Google Android

CVE 2024 0044 CVE-2024-0044, identified in the createSessionI...

Adobe Acrobat Android Path Traversal Vulnerability

Adobe Acrobat is the United States of America Odo than Adobe company's set of PDF file editing and conversion tools. A path traversal vulnerability exists in Adobe Acrobat Android version 24.4.2.33155 and prior versions, which stems from the program failing to properly filter for special elements...