5279 matches found
CVE-2023-21249
In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21249
The vulnerability is in Google Android's Framework, specifically OneTimePermissionUserManager.java, where a permissions bypass can cause a one‑time permission to be retained. This could enable local elevation of privilege with User execution privileges required and no user interaction. Public tec...
CVE-2023-21246
In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21246
CVE-2023-21246 affects Android’s ShortcutInfo.java. The issue: an uncaught exception could allow an app to retain notification listening access, enabling local elevation of privilege with no extra execution privileges and no user interaction required. Public details in NVD/NVD-linked entries conf...
CVE-2023-21245
CVE-2023-21245 affects Google's Android Framework, specifically the showNextSecurityScreenOrFinish path in KeyguardSecurityContainerController.java. A logic error could allow access to the lock screen during device setup, enabling local elevation of privilege without user interaction. Exploitatio...
CVE-2023-21241
In rwi93sendtoupper of rwi93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21241
In rwi93sendtoupper of rwi93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21241
CVE-2023-21241 describes an out-of-bounds write caused by an integer overflow in rw_i93_send_to_upper() within rw_i93.cc, enabling local privilege escalation with no extra execution privileges or user interaction. Public docs consistently tie this to Android components and patch-level fixes. The ...
CVE-2023-21145
In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21145
CVE-2023-21145 corresponds to an Android Framework elevation-of-privilege issue in ActivityRecord.java, specifically in updatePictureInPictureMode, where a logic error could bypass background launch restrictions. The result is local escalation of privilege with no extra execution privileges or us...
CVE-2023-20942
The CVE-2023-20942 issue affects Android’s AudioFlinger.cpp, specifically in openMmapStream, where a logic error can allow recording audio without showing the microphone privacy indicator. This vulnerability enables local privilege escalation with no extra execution privileges and requires no use...
CVE-2023-30917
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2023-30917
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
Privilege escalation
In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2023-30929
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2023-30928
CVE-2023-30928 affects the telephony service and is due to a missing permission check in the telephony component, enabling local escalation of privilege with no additional execution privileges. Multiple sources (NVD, Red Hat, CNNVD, PRION, CVE lists) corroborate the issue as a local‑privilege‑esc...
CVE-2023-30928
In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2023-30917
CVE-2023-30917 affects DMService in Unisoc chipsets (e.g., SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T618, etc.) due to a missing permission check, enabling local privilege escalation with no additional privileges. NVD data shows CVSS v3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base...