CVE-2022-20226

In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12...

PT-2022-14442 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: A logic error in the code of StorageManagerService.java and UserManagerService.java can lead to user directories being left unencrypted. This issue can result in local information...

CVE-2022-33701

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is protected by system permission by sending braodcast intent...

CVE-2022-33685

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...

CVE-2022-33685

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...

CVE-2022-33695

Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service...

CVE-2022-33695

Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service...

Information disclosure

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...

CVE-2022-33685

Samsung Wearable Manager Service on Samsung mobile devices is affected by an unprotected dynamic receiver vulnerability, allowing attackers to launch arbitrary activity and access sensitive information. The issue stems from an unprotected receiver in the Wearable Manager and is mitigated by the S...

CVE-2022-33685

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...

PT-2022-21800

Name of the Vulnerable Software and Affected Versions Wearable Manager Service versions prior to SMR Jul-2022 Release 1 Description The issue concerns an unprotected dynamic receiver in the Wearable Manager Service, allowing an attacker to launch arbitrary activities and access sensitive...

CVE-2022-33685: Dead Code

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information...

The vulnerability of the Windows Container Manager Service in Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Windows Container Manager Service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2022-30132

Windows Container Manager Service Elevation of Privilege Vulnerability...

CVE-2022-20192

In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-30132: Undefined Security Weakness

Windows Container Manager Service Elevation of Privilege Vulnerability...

Microsoft Windows Container Manager Service 安全漏洞

Microsoft Windows Container Manager Service is an application from Microsoft USA. It provides a function to manage windows containers. A security vulnerability exists in Microsoft Windows Container Manager Service. The following products and versions are affected:Windows 10 Version 1809 for 32-bi...

CVE-2022-30727

Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value in work space...

PUB-A-220737634

In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. This could lead to local information disclosure about enabled notification listeners with User execution privileges needed. User interaction is not needed for exploitation...

Apache Jetspeed vulnerable to SQL Injection

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the 1 role or 2 user parameter to services/usermanager/users/...