78 matches found
CVE-2022-20356
In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...
CVE-2021-39704
In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2023-52382
CVE-2023-52382 entry is rejected/not used.
PT-2024-14572 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns improper control over foreground service notifications in the notification module. Successful exploitation may affect service confidentiality. Recommendations: At...
CVE-2024-0048
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVE-2024-0048
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
Android Pixel Information Disclosure Vulnerability
Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information...
ASB-A-316893159
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
Huawei EMUI and Huawei HarmonyOS bypass foreground service restriction vulnerability (CNVD-2025-07824)
Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei HarmonyOS is an operating system... A vulnerability exists in Huawei EMUI and Huawei HarmonyOS that can be exploited by an attacker to bypass the...
CVE-2023-52097
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality...
Huawei EMUI 安全漏洞
Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei HarmonyOS is an operating system... A vulnerability exists in Huawei EMUI and Huawei HarmonyOS that can be exploited by an attacker to bypass the...
Huawei HarmonyOS and EMUI Bypass Frontend Service Restriction Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A vulnerability exists in Huawei HarmonyOS and EMUI that...
CVE-2023-52099
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52099
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality...
Design/Logic Flaw
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52099
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52099
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-52099
CVE-2023-52099 concerns Huawei HarmonyOS/EMUI where the NMS module has a bypass of foreground service restrictions. The vulnerability can lead to confidentiality leakage. Descriptions in multiple sources (NVD, CNVD) confirm the issue and its impact, but no concrete affected versions, exploit deta...
PT-2024-14396 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the bypassing of foreground service restrictions in the NMS module. Successful exploitation may affect service confidentiality...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A vulnerability exists in Huawei HarmonyOS and EMUI that...