Privilege escalation

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2020-0109

CVE-2020-0109 affects Android 9–10 and relates to NotificationManagerService.java: in simulatePackageSuspendBroadcast there is a missing permission check, enabling local privilege escalation by crafting fake system notifications without extra execution privileges. Public references indicate the i...

CVE-2020-0109

In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

CVE-2020-0084

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Design/Logic Flaw

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0084

In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2020-0084

CVE-2020-0084 affects Android 10, where several functions in NotificationManagerService.java lack permission checks. This enables local escalation of privilege by creating fake system notifications with no extra privileges, and exploitation does not require user interaction. The Pixel Update Bull...

CVE-2019-2219

In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User...

Design/Logic Flaw

In several functions of NotificationManagerService.java and related files, there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User...

CVE-2019-2219

CVE-2019-2219 affects the Android Framework, specifically when linked to NotificationManagerService and related files. The described issue is a local elevation of privilege due to a permission bypass that could allow recording audio from the background without user notification, requiring User ex...

Design/Logic Flaw

In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to local escalation of privilege, with no additional privileges needed. User interaction is not needed for exploitation. Product:...

CVE-2019-2098

CVE-2019-2098 affects Android 7.0–9 and is tied to a missing permissions check in NotificationManagerService.java areNotificationsEnabledForPackage, enabling local elevation of privilege with no additional privileges and no user interaction required. The issue impacts Android’s System/notificatio...

CVE-2016-3884

CVE-2016-3884 affects Android's Notification Manager Service (server/notification/NotificationManagerService.java) in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01. The root cause is missing UID checks, which allows a crafted application to bypass restrictions on method calls, constitut...