Lucene search
+L

105 matches found

attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•16 views

CVE-2022-20274

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

7.8CVSS7.2AI score0.00096EPSS
SaveExploits0References2
Prion
Prion
•added 2022/08/12 3:15 p.m.•43 views

Design/Logic Flaw

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

4.3CVSS7.8AI score0.00096EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/08/12 12:00 a.m.•20 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Keyguard component, which stems from a lack of permission checking...

7.8CVSS7.4AI score0.00096EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/08/11 3:14 p.m.•46 views

CVE-2022-20274

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

8.1AI score0.00096EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/11 3:14 p.m.•75 views

CVE-2022-20274

In Android 13, CVE-2022-20274 affects the Keyguard component where a missing permission check could enable local escalation of privilege and prevent screen timeout. Exploitation requires local access with low privileges and no user interaction, potentially compromising confidentiality, integrity,...

7.8CVSS7.8AI score0.00096EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•7 views

CVE-2022-20274: Missing Authorization

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

7.8CVSS7.4AI score0.00096EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/08/11 12:00 a.m.•13 views

PT-2022-14498 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed...

7.8CVSS7.8AI score0.00096EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/07/15 12:00 a.m.•70 views

Samsung Knoxguard authorization error vulnerability

Samsung Knoxguard is an open source Android platform-based security solution from Samsung Samsung in South Korea that can enhance security across the board through a combination of physical means and software systems, while being perfectly compatible with the Android and Google ecosystems, bringi...

6.2CVSS2.3AI score0.0009EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/12 2:15 p.m.•16 views

CVE-2022-33702

Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset...

5.5CVSS5.8AI score0.0009EPSS
SaveExploits0References1
Prion
Prion
•added 2022/07/12 2:15 p.m.•30 views

Authorization

Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset...

2.1CVSS5.4AI score0.0009EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•18 views

SAMSUNG Mobile devices Knoxguard 安全漏洞

Samsung Knoxguard is an open source Android platform-based security solution from Samsung Samsung in South Korea that can enhance security across the board through a combination of physical means and software systems, while being perfectly compatible with the Android and Google ecosystems, bringi...

6.2CVSS5.5AI score0.0009EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•4 views

CVE-2022-33702: Improper Authorization

Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset...

6.2CVSS6AI score0.0009EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•9 views

PT-2022-21818 · Samsung · Knox Guard

Name of the Vulnerable Software and Affected Versions: Knoxguard versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper authorization vulnerability. It allows a local attacker to disable the keyguard and bypass the Knoxguard lock by performing a factory reset...

6.2CVSS5.5AI score0.0009EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/10 8:15 p.m.•6 views

CVE-2022-20006

In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enabled, with no additional execution privileges needed. User...

7CVSS7AI score0.00138EPSS
SaveExploits0References1
OSV
OSV
•added 2021/01/11 10:15 p.m.•13 views

CVE-2021-0320

In isdevicelocked and setdevicelocked of keystorekeymasterenforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

4.7CVSS6.3AI score0.00108EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/11 10:15 p.m.•41 views

CVE-2021-0320

In isdevicelocked and setdevicelocked of keystorekeymasterenforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

4.7CVSS4.5AI score0.00108EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/11 10:15 p.m.•14 views

CVE-2021-0320

In isdevicelocked and setdevicelocked of keystorekeymasterenforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

4.7CVSS6.2AI score0.00108EPSS
SaveExploits0References2
CVE
CVE
•added 2021/01/11 9:48 p.m.•160 views

CVE-2021-0320

CVE-2021-0320 affects Android 10/11, describing a race condition in keystore_keymaster_enforcement.h (is_device_locked and set_device_locked) that could bypass lockscreen requirements for keyguard-bound keys. This may lead to local information disclosure without additional privileges, and exploit...

4.7CVSS4.4AI score0.00108EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2021/01/01 12:00 a.m.•49 views

ASB-A-169933423

In isdevicelocked and setdevicelocked of keystorekeymasterenforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

4.7CVSS5.9AI score0.00108EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/10 6:15 p.m.•17 views

CVE-2020-0114

In onCreateSliceProvider of KeyguardSliceProvider.java, there is a possible confused deputy due to a PendingIntent error. This could lead to local escalation of privilege that allows actions performed as the System UI, with no additional execution privileges needed. User interaction is not needed...

7.8CVSS7.2AI score0.00324EPSS
SaveExploits0References1
Rows per page
Query Builder