CVE-2023-1228

CVE-2023-1228 is a Chromium-based Chrome vulnerability: Insufficient policy enforcement in Intents. Affects Google Chrome on Android prior to 111.0.5563.64 and allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Mitigation in public advisories points to updating Ch...

PT-2023-2080

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 111.0.5563.64 Microsoft Edge affected versions not specified Description The issue is related to the incorrect implementation of security checks for standard elements in the Intents function of Google Chrome and...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome version 111.0.5563.64, which stems from a weak policy enforcement issue in the Intents component. allows remote attackers to bypass navigation restrictions via a crafted HTML page...

SUSE CVE-2015-7190

The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML document...

SUSE CVE-2016-1940

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during 1 shortcut opening or 2 BOOKMARK intent processing...

SUSE CVE-2017-5463

Android intents can be used to launch Firefox for Android in reader mode with a user specified URL. This allows an attacker to spoof the contents of the addressbar as displayed to users. Note: This attack only affects Firefox for Android. Other operating systems are not affected. This vulnerabili...

SUSE CVE-2019-13707

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application...

SUSE CVE-2020-15980

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents...

SUSE CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

SUSE CVE-2022-1130

Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app...

SUSE CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

Android 14 developer preview highlights multiple security improvements

Android developers have been given a taste of whats to come in the next big step up in mobile land, thanks to Android 14 waiting on the horizon. The developer preview is a great way for those most familiar with the mobile operating system to see which changes theyll enjoy and what ones theyll hav...

CVE-2023-21445

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R11, 13.1.03.501 in Android S12 and 14.1.00.422 in Android T13 allows local attacker to write file with MyFiles privilege via implicit intent...

CVE-2023-21447

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. SAMSUNG Mobile devices Android R11 before 12.2.09, Android S12 before 13.1.03.501, and Android T13 before 14.1.00.422 contain a security...

CVE-2022-3229

CVE-2022-3229 affects Unified Remote’s web management interface for Unified Remote; the interface does not require authentication, enabling a remote, unauthenticated attacker to change or disable authentication for the Unified Remote protocol and then execute code. The issue has an established CV...

CVE-2022-3229

Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker can change or disable authentication requirements for the Unified Remote protocol, and leverage this now-unauthenticated access to run code ...

PT-2023-4137 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 109.0.5414.119 Description: The issue is related to insufficient policy enforcement in Intents, allowing a remote attacker to bypass the same origin policy via a crafted HTML page. This could...

PT-2022-25087 · Unknown · Contactliststartactivityhelper

Name of the Vulnerable Software and Affected Versions: Phone versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the ContactListStartActivityHelper. This vulnerability allows access to sensitive information via an implicit...

DEBIAN-CVE-2022-3317

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...