Lucene search
+L

6423 matches found

Cvelist
Cvelist
added 2024/02/16 7:33 p.m.41 views

CVE-2024-0020

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclosure across users of a device with no additional execution privileges needed. User interaction is...

6.2AI score0.00107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/16 7:33 p.m.35 views

CVE-2024-0017

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

6.2AI score0.00105EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/16 7:33 p.m.11 views

CVE-2024-0020

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclosure across users of a device with no additional execution privileges needed. User interaction is...

6.3AI score0.00107EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/16 7:15 p.m.31 views

CVE-2023-40085

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00089EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/16 7:15 p.m.13 views

CVE-2023-40085

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00089EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/16 7:15 p.m.21 views

Out-of-bounds

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.4AI score0.00089EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/16 6:33 p.m.40 views

CVE-2023-40085

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00089EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/16 6:33 p.m.10 views

CVE-2023-40085

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00089EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/16 6:33 p.m.6311 views

CVE-2023-40085

CVE-2023-40085 involves a missing bounds check in ShimConverter.cpp, in the function convertSubgraphFromHAL , which can trigger a possible out-of-bounds read. This leads to local information disclosure with no additional execution privileges required and no user interaction. The connected documen...

5.5CVSS6AI score0.00089EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/02/16 2:15 a.m.28 views

CVE-2024-0037

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00115EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/16 2:15 a.m.10 views

CVE-2024-0037

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00115EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/16 2:15 a.m.12 views

CVE-2024-0030

In btiftobtaresponse of btifgattutil.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/16 2:15 a.m.24 views

CVE-2024-0030

In btiftobtaresponse of btifgattutil.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00385EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/16 2:15 a.m.9 views

CVE-2023-40093

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00131EPSS
SaveExploits0References3
NVD
NVD
added 2024/02/16 2:15 a.m.26 views

CVE-2023-40093

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00131EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/16 2:15 a.m.19 views

Information disclosure

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.6AI score0.0029EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/16 12:08 a.m.6914 views

CVE-2024-0037

The CVE-2024-0037 entry describes a local information disclosure in Android’s SaveUi.java, where applyCustomDescription can view other users’ images due to a missing permission check. Exploitation is possible with local attacker privileges and does not require user interaction. Connected document...

3.3CVSS6AI score0.00115EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/02/16 12:08 a.m.49 views

CVE-2024-0037

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00115EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/16 12:08 a.m.17 views

CVE-2024-0030

In btiftobtaresponse of btifgattutil.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00385EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/16 12:08 a.m.34 views

CVE-2024-0030

In btiftobtaresponse of btifgattutil.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00385EPSS
SaveExploits0References2
Rows per page
Query Builder