Lucene search
+L

719 matches found

OSV
OSV
•added 2021/07/14 2:15 p.m.•8 views

CVE-2020-0417

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score0.00137EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/07/14 2:15 p.m.•9 views

CVE-2020-0417

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.6AI score0.00137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/14 12:00 a.m.•2 views

CVE-2020-0417: Incorrect Permission Assignment for Critical Resource

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS5.8AI score0.00137EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/01 12:00 a.m.•26 views

ASB-A-154319182

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00137EPSS
SaveExploits0References2
NVD
NVD
•added 2021/06/22 12:15 p.m.•47 views

CVE-2021-0552

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

5.5CVSS0.00109EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/22 12:15 p.m.•14 views

CVE-2021-0552

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

5.5CVSS5.9AI score0.00109EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/22 12:15 p.m.•11 views

CVE-2021-0552

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

5.5CVSS6.1AI score0.00109EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/22 12:15 p.m.•26 views

Design/Logic Flaw

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

2.1CVSS5.1AI score0.00109EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2021/06/22 11:15 a.m.•32 views

CVE-2021-0572

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

5.5CVSS0.00109EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/22 11:15 a.m.•20 views

CVE-2021-0572

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

5.5CVSS6.2AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/22 11:15 a.m.•29 views

CVE-2021-0570

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS0.00109EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/22 11:15 a.m.•15 views

CVE-2021-0570

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS5.9AI score0.00109EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/22 11:15 a.m.•23 views

Design/Logic Flaw

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.6CVSS7.7AI score0.00109EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/06/22 11:15 a.m.•8 views

CVE-2021-0570

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.4AI score0.00109EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/22 10:57 a.m.•90 views

CVE-2021-0570

The CVE-2021-0570 entry maps to an elevation-of-privilege issue in Android 11’s BugreportProgressService.sendBugreportNotification caused by an unsafe PendingIntent. This can bypass privileges locally without user interaction, as vendor records and the Pixel update bulletin note patches for Andro...

7.8CVSS7.7AI score0.00109EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/22 12:00 a.m.•3 views

CVE-2021-0572: Incorrect Permission Assignment for Critical Resource

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/22 12:00 a.m.•2 views

PT-2021-13213

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the sendBugreportNotification function of BugreportProgressService.java. This could lead to local escalation of...

7.8CVSS0.00109EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/06/22 12:00 a.m.•0 views

PT-2021-13199

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: The issue is related to a possible permission bypass due to an unsafe PendingIntent in the getEndItemSliceAction of MediaOutputSlice.java. This could lead to local information disclosure, requiring Use...

5.5CVSS0.00109EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/22 12:00 a.m.•4 views

CVE-2021-0570: Incorrect Permission Assignment for Critical Resource

In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS5.8AI score0.00109EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/22 12:00 a.m.•2 views

CVE-2021-0552: Incorrect Permission Assignment for Critical Resource

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References2
Rows per page
Query Builder