Design/Logic Flaw

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI application intents. The LG ID is LVE-SMP-180005...

CVE-2018-14981

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI application intents. The LG ID is LVE-SMP-180005...

CVE-2018-14981

CVE-2018-14981 affects LG devices running Android 6.0–8.1, where the SystemUI application’s intents grant incorrect access control. The root cause is an access-control fault in SystemUI intents, enabling bypass of security restrictions; exploitation status is not detailed in the provided document...

CVE-2018-14981: Incorrect Permission Assignment for Critical Resource

Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for SystemUI application intents. The LG ID is LVE-SMP-180005...

PT-2018-12858

Name of the Vulnerable Software and Affected Versions LG devices based on Android versions 6.0 through 8.1 Description The issue concerns incorrect access control for SystemUI application intents on certain LG devices. Recommendations For LG devices based on Android versions 6.0 through 8.1, at t...

CVE-2018-11142: Incorrect Authorization

The 'systemui/settingsnetwork.php' and 'systemui/settingspatching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'XForwardedFor' HTTP headers in a POST request. An anonymous user c...

PT-2018-10334

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue allows an anonymous user to bypass restrictions and execute critical functions without authorization by modifying the Host and X Forwarded For HTTP headers in a POST...

CVE-2017-13212

An elevation of privilege vulnerability in the Android system systemui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985...

Privilege escalation

An elevation of privilege vulnerability in the Android system systemui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985...

CVE-2017-13212

An elevation of privilege vulnerability in the Android system systemui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985...

CVE-2017-13212

CVE-2017-13212 is an Elevation of Privilege in Android’s systemui affecting Android 5.1.1–8.0. The vulnerable component is the Android System UI; root cause is not detailed in the provided documents. No exploitation details are provided. The Pixel/Nexus bulletin lists this CVE under the System ca...

CVE-2017-13212

An elevation of privilege vulnerability in the Android system systemui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985...

CVE-2017-13212: Undefined Security Weakness

An elevation of privilege vulnerability in the Android system systemui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985...

PT-2018-5507

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description: The issue is related to an elevation of privilege in the Android system, specifically in the systemui component. Recommendations: For Android versions 5.1.1, 6.0, 6.0.1,...

CVE-2017-5350

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

Code injection

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

CVE-2017-5350

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

CVE-2017-5350

CVE-2017-5350 affects Samsung Note devices on Android L/M/N (L 5.0/5.1, M 6.0, N 7.0). The issue arises from incomplete exception handling in systemUI, allowing remote attackers to crash the UI and cause denial of service. Root cause: improper exception handling in the affected component; vulnera...

CVE-2017-5350: Undefined Security Weakness

Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allow attackers to crash systemUI by leveraging incomplete exception handling. The Samsung ID is SVE-2016-7122...

PT-2017-16449

Name of the Vulnerable Software and Affected Versions Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software Description The issue allows attackers to crash systemUI by leveraging incomplete exception handling. Recommendations For Samsung Note devices with L5.0/5.1 software, update to a...