912 matches found
CVE-2022-27838
Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...
CVE-2022-27837
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
Privilege escalation
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
CVE-2022-27838
Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...
CVE-2022-27838
Summary: CVE-2022-27838 is an improper access control vulnerability in Samsung FactoryCamera prior to version 2.1.96. An attacker could access a file with system privileges due to insufficient access controls. Affected software: FactoryCamera, versions before 2.1.96. Impact: Access to restricted ...
CVE-2022-27837
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
CVE-2022-27837
CVE-2022-27837 involves a vulnerability in Android’s Accessibility framework through the use of PendingIntent. The issue, described across multiple sources, is triggered in Android R (11.0) prior to 12.5.3.2 and Android S (12.0) prior to 13.0.1.1, where an attacker could access files with system ...
CVE-2021-39725
In gasketfreecoherentmemoryall of gasketpagetable.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...
Mozilla VPN local privilege escalation vis uncontrolled OpenSSL search path — Mozilla
Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege...
CVE-2022-23426
A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege...
CVE-2022-23426
A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege...
VulnCheck KEV: CVE-2021-36934
If a Volume Shadow Copy VSS shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level...
Input validation
ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...
CVE-2022-21933
CVE-2022-21933 affects ASUS VivoMini/Mini PC and describes an improper input validation vulnerability. A local attacker with system privileges can trigger a System Management Interrupt (SMI) to modify memory, resulting in arbitrary code execution and potential control or disruption of the system....
PT-2022-15190 · Asus · Asus Vivomini/Mini Pc
Name of the Vulnerable Software and Affected Versions: ASUS VivoMini/Mini PC affected versions not specified Description: The issue is related to an improper input validation vulnerability. A local attacker with system privilege can exploit this by using system management interrupt SMI to modify...
PT-2021-23726 · Kaseya +1 · Kaseya Unitrends Backup Appliance +1
Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Unitrends Windows agent, which was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed...
CVE-2021-0544
In phNxpNciHalprintresstatus of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2021-25399
Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege...
Improper access control
An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected activity with system privilege via untrusted applications...