Lucene search
K

145 matches found

RedhatCVE
RedhatCVE
added 2025/09/06 7:31 p.m.5 views

CVE-2025-48543

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS7AI score0.0031EPSS
Exploits1References1
NVD
NVD
added 2025/09/04 7:15 p.m.3 views

CVE-2025-48543

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS0.0031EPSS
Exploits1References3
OSV
OSV
added 2025/09/04 7:15 p.m.1 views

CVE-2025-48543

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS5.9AI score0.0031EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/04 6:34 p.m.6 views

CVE-2025-48543

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0031EPSS
Exploits1References2
NVD
NVD
added 2025/09/04 6:15 p.m.4 views

CVE-2025-26456

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.00063EPSS
Exploits0References4
OSV
OSV
added 2025/09/04 6:15 p.m.2 views

CVE-2025-26456

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00063EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/04 5:15 p.m.3 views

CVE-2025-26456

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00063EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from a post-release reuse vulnerability, which can be exploited...

8.8CVSS6.4AI score0.0031EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.3 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability caused by a logic error in multiple functions of DexUseManagerLocal.java. An attacker can exploit the vulnerability to cause the system server to crash...

5.5CVSS6.7AI score0.00063EPSS
Exploits0References5
VulnCheck KEV
VulnCheck KEV
added 2025/09/01 12:0 a.m.3 views

VulnCheck KEV: CVE-2025-48543

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS5.9AI score0.0031EPSS
In wildExploits1References6
OSV
OSV
added 2025/09/01 12:0 a.m.6 views

ASB-A-421834866

In multiple locations, there is a possible way to escape chrome sandbox to attack android systemserver due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS7AI score0.0031EPSS
Exploits1References2
OSV
OSV
added 2025/08/20 6:55 p.m.2 views

USN-7703-2 linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gkeop, linux-ibm, linux-ibm-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...

7.8CVSS6.7AI score0.00279EPSS
Exploits1References71
CNNVD
CNNVD
added 2025/08/08 12:0 a.m.0 views

Mubit Powered BLUE 870 路径遍历漏洞

Mubit Powered BLUE 870 is a DNS server from Mubit Japan. A path traversal vulnerability exists in Mubit Powered BLUE 870 version 0.20130927 and earlier, which stems from path traversal and could lead to arbitrary file disclosure...

5.3CVSS5AI score0.0026EPSS
Exploits0References3
OSV
OSV
added 2025/07/17 1:45 p.m.3 views

USN-7591-6 linux-raspi vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 It was discovered that the CIFS network file system...

8.8CVSS6.8AI score0.02589EPSS
Exploits0References68
OSV
OSV
added 2025/06/23 11:53 p.m.4 views

USN-7591-1 linux, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. CVE-2024-8805 It was discovered that the CIFS network file system...

8.8CVSS6.8AI score0.02589EPSS
Exploits0References68
BDU FSTEC
BDU FSTEC
added 2025/06/23 12:0 a.m.3 views

The vulnerability of the server of the surveillance and recording system for AXIS Camera Station Pro allows a intruder to create or modify arbitrary files.

The vulnerability of the surveillance and recording system server for AXIS Camera Station Pro relates to improper external management of file names or files. Exploiting this vulnerability can allow attackers to create or modify arbitrary files...

6.1CVSS5.6AI score0.00143EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/05/28 7:53 a.m.3 views

USN-7521-3 linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Serial ATA and Parallel...

7.8CVSS6.8AI score0.00279EPSS
Exploits1References229
RedhatCVE
RedhatCVE
added 2025/05/22 5:16 p.m.2 views

CVE-2020-0082

In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local escalation of privilege to systemserver with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6.8AI score0.00212EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 a.m.5 views

CVE-2016-11031

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, and M6.0 software. AntService allows a systemserver crash and reboot. The Samsung ID is SVE-2016-7044 November 2016...

7.8CVSS7.1AI score0.00125EPSS
Exploits0References1
OSV
OSV
added 2025/05/16 4:11 p.m.1 views

USN-7512-1 linux-gcp-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

7.8CVSS6.9AI score0.00193EPSS
Exploits3References129
Rows per page
Query Builder