Lucene search
+L

3187 matches found

CNVD
CNVD
added 2024/05/11 12:00 a.m.19 views

Google Android elevation of privilege vulnerability (CNVD-2024-41864)

Google Android is a Linux-based open source operating system from Google. Google Android has an elevation of privilege vulnerability, the vulnerability stems from a logic error in the sendIntentSender method of the ActivityManagerService.java file, which can be exploited by an attacker to start a...

7.8CVSS6.8AI score0.00107EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/05/11 12:00 a.m.15 views

Google Android elevation of privilege vulnerability (CNVD-2024-27512)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in code in multiple locations. An attacker can exploit this vulnerability to cause an elevation of privilege...

7.8CVSS6.9AI score0.00149EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/07 9:15 p.m.9 views

CVE-2024-23710

In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

7.8CVSS6AI score0.0009EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/07 9:15 p.m.20 views

CVE-2024-0043

In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS6.8AI score0.00149EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/07 9:15 p.m.27 views

CVE-2024-0025

In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00107EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/07 9:15 p.m.30 views

CVE-2024-23710

In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

7.8CVSS7AI score0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/07 9:03 p.m.21 views

CVE-2024-0025

In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score0.00107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/07 9:03 p.m.32 views

CVE-2024-0043

In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7AI score0.00149EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/07 9:03 p.m.142 views

CVE-2024-0025

CVE-2024-0025 concerns a logic error in the Android framework (ActivityManagerService.sendIntentSender) that can enable a local elevation of privilege through a background activity launch. Affected component is Android’s system services (ActivityManagerService); no specific product/version is dis...

7.8CVSS7AI score0.00107EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/07 9:01 p.m.22 views

CVE-2024-23710

In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

7.3AI score0.0009EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/07 9:01 p.m.51 views

CVE-2024-23710

In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...

7.2AI score0.0009EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/05/07 3:50 p.m.17 views

curl: Usage of disabled protocol

A flaw was found in curl. When a protocol selection parameter disables all protocols without adding any, the default set of protocols remains in the allowed set due to a logic error, allowing usage of disabled protocols...

3.5CVSS7.3AI score0.01681EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2024/05/07 3:44 p.m.14 views

curl: Usage of disabled protocol

A flaw was found in curl. When a protocol selection parameter disables all protocols without adding any, the default set of protocols remains in the allowed set due to a logic error, allowing usage of disabled protocols...

3.5CVSS7.3AI score0.01681EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.9 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in assertPackageWithSharedUserIdIsPrivileged in InstallPackageHelper.java, which can be exploited by an attacker to escalate privilege...

7.8CVSS7.3AI score0.0009EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/05/07 12:00 a.m.9 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has an elevation of privilege vulnerability, the vulnerability stems from a logic error in the sendIntentSender method of the ActivityManagerService.java file, which can be exploited by an attacker to start a...

7.8CVSS7.1AI score0.00107EPSS
SaveExploits0References4
NVD
NVD
added 2024/05/06 3:15 a.m.33 views

CVE-2024-20021

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249...

6.7CVSS6.5AI score0.00111EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/05/06 2:52 a.m.19 views

CVE-2024-20021

In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08584568; Issue ID: MSV-1249...

6.9AI score0.00111EPSS
SaveExploits1References1
CVE
CVE
added 2024/05/06 2:52 a.m.66 views

CVE-2024-20021

The CVE-2024-20021 issue affects the ARM Trusted Firmware (ATF) SPM component and stems from a logic error that allows remapping of physical memory to virtual memory. This could enable local privilege escalation with System execution privileges (S-mode) required, and exploitable without user inte...

6.7CVSS6.7AI score0.00111EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/05/01 12:00 a.m.46 views

ASB-A-279428283

In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00107EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/01 12:00 a.m.35 views

ASB-A-295549388

In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7.8AI score0.00149EPSS
SaveExploits0References2
Rows per page
Query Builder