PT-2024-24969 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read in the FillCellInfo function of CellInfoListParserV2 due to a missing bounds check. This could lead to local information disclosure...

PT-2024-24953 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible Use after Free due to improper locking in the lwis fence signal function of lwis debug.c. This could lead to local escalation of privilege from the ha...

PT-2024-24981 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a possible information disclosure due to side channel information disclosure, which could lead to local information disclosure without requiring additional...

Adobe Acrobat Mobile Sign Android 路径遍历漏洞

Adobe Acrobat is the United States of America Odo than Adobe company's set of PDF file editing and conversion tools. A path traversal vulnerability exists in Adobe Acrobat Android version 24.4.2.33155 and prior versions, which stems from the program failing to properly filter for special elements...

CVE-2024-5687

If a specific sequence of actions is performed when opening a new tab, the triggering principal associated with the new tab may have been incorrect. The triggering principal is used to calculate many values, including the Referer and Sec- headers, meaning there is the potential for incorrect...

McAfee Security Antivirus VPN for Android Security Vulnerability

McAfee Security Antivirus VPN for Android is a cybersecurity software from McAfee USA. A security vulnerability exists in McAfee Security Antivirus VPN for Android prior to version 8.3.0, which stems from improper deep link validation and allows an attacker to launch arbitrary URLs within the...

PT-2024-4747

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a logic error in the code, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for...

Mozilla Firefox for Android Spoofing Vulnerability (CNVD-2024-23342)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for Android suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks by convincing a victim to visit a specially crafted Web site...

Google Android elevation of privilege vulnerability (CNVD-2024-41861)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in assertPackageWithSharedUserIdIsPrivileged in InstallPackageHelper.java, which can be exploited by an attacker to escalate privilege...

Google Android Denial of Service Vulnerability (CNVD-2024-41858)

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android due to resource exhaustion in multiple functions of SnoozeHelper.java. An attacker can exploit this vulnerability to cause a denial of service...

Google Android Information Disclosure Vulnerability (CNVD-2024-27516)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2024-41856)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from the ability to access clipboard messages without displaying a toast message in multiple methods in the NotificationManagerService.java...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in assertPackageWithSharedUserIdIsPrivileged in InstallPackageHelper.java, which can be exploited by an attacker to escalate privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an input validation error vulnerability that stems from improper input validation in the migrateNotificationFilter method of the NotificationManagerService.java file, which can be exploited by an...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which stems from a resource exhaustion issue in multiple methods of the SnoozeHelper.java file, and can be exploited by an attacker to cause a denial of service...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability due to a resource exhaustion flaw in multiple functions of AppOpsService.java. An attacker can exploit this vulnerability to cause a denial of service...

PT-2024-15302 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the sendIntentSender method of ActivityManagerService.java, which could lead to a background activity launch. This might result in local escalation ...

TVS Motor Connect Mobile Application 安全漏洞

TVS Motor Connect Mobile Application is an application by TVS Motor India to experience the products and services of TVS Motor Company. A security vulnerability exists in TVS Motor Connect Mobile Application Android v.4.5.1 and iOS v.5.0.0, which stems from a vulnerability that could allow a remo...

The vulnerability of the Android operating system on Pixel phones allows attackers to gain increased privileges.

The vulnerability of the Android operating system on Pixel phones exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge for Android Chromium-based suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...