CVE-2023-40116

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-27285 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a confused deputy in multiple locations, potentially allowing an attacker to view another user's images. This could lead to...

PT-2023-27276 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the latest patchday Description: The issue is related to improper input validation, allowing for the bypass of user notification of foreground services. This could lead to local escalation of privilege with no...

PT-2023-27286 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a confused deputy in the isFullScreen function of FillUi.java, which could allow viewing another user's images. This leads to...

PT-2023-27284 · Unknown · Gpuservice

Name of the Vulnerable Software and Affected Versions: GpuService affected versions not specified Description: The issue is related to a possible use after free due to a race condition in the GpuService of GpuService.cpp. This could lead to local escalation of privilege with no additional executi...

PT-2023-27281 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of...

PT-2023-27288 · Google · Android

Name of the Vulnerable Software and Affected Versions: DialogFillUi.java affected versions not specified Description: The issue is related to a confused deputy in the setHeader of DialogFillUi.java, allowing an attacker to view another user's images. This could lead to local information disclosur...

PT-2023-27290 · Fillui · Fillui

Name of the Vulnerable Software and Affected Versions: FillUi affected versions not specified Description: The issue in FillUi allows an attacker to view another user's images due to a confused deputy, potentially leading to local information disclosure without requiring additional execution...

CVE-2023-35656

In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-25245

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue is related to a possible out of bounds read due to a missing bounds check in multiple functions of protocolembmsadapter.cpp. This could lead to remote information disclosure with n...

Magento Open Source allows Server-Side Request Forgery (SSRF)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

CVE-2023-26367 Error based file extraction via PHP filter chains during product bulk import logic

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read by an admin-privilege authenticated attacker. Exploitation of this issue do...

CVE-2023-3781

there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40141

In tempresidencynamestore of thermalmetrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-25248 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible way to corrupt memory due to a use after free in the lwis transaction client cleanup function of lwis transaction.c...

PT-2023-25236 · Google · Android

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: The issue is related to a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction...

PT-2023-27294 · Google · Android

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: The issue is related to a logic error in the code that allows bypassing carrier restrictions. This could lead to local escalation of privilege without needing additional execution privileges...

PT-2023-26124 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible use-after-free write due to improper locking, which could lead to local escalation of privilege with no additional...

PT-2023-25250 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: There is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed...

CVE-2023-35662: Out-of-bounds Write

there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...