Lucene search
+L

232 matches found

attackerkb
attackerkb
•added 2022/03/30 4:15 p.m.•10 views

CVE-2021-39779

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.5CVSS6.2AI score0.00104EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/30 4:15 p.m.•27 views

CVE-2021-39779

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.5CVSS0.00104EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/30 4:15 p.m.•28 views

Information disclosure

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

2.1CVSS5.5AI score0.00104EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/30 4:02 p.m.•35 views

CVE-2021-39779

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.9AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
•added 2022/03/30 4:02 p.m.•99 views

CVE-2021-39779

CVE-2021-39779 affects Android 12L via Telecom Service.getCallStateUsingPackage, where there is a missing permission check that could allow local information disclosure of the call state without extra execution privileges. The issue is described across sources (CVE entry and CNVD-2022-44589) as a...

5.5CVSS5.5AI score0.00104EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•10 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that originates from a missing permission check in Telecom Service's getCallStateUsingPackage. An attacker could use this vulnerability to obtain...

5.5CVSS5.7AI score0.00104EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•3 views

CVE-2021-39779: Incorrect Default Permissions

In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

5.5CVSS6AI score0.00104EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/15 7:15 p.m.•8 views

CVE-2021-0989

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

3.3CVSS5.6AI score0.0011EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/15 7:15 p.m.•17 views

CVE-2021-0989

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

3.3CVSS5.9AI score0.0011EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/15 7:15 p.m.•20 views

Information disclosure

In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...

2.1CVSS3.5AI score0.0011EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/11/10 1:15 p.m.•5 views

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5CVSS5.6AI score0.00155EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2012/05/19 1:59 a.m.•10 views

Dear Jailbreaker, Apple Wants to Have a Word with You

After banning the word “jailbreak” from its app store and music library, Apple today reversed course and again permits the term – slang for hacking into a device to download unauthorized content — to appear on iTunes and its App Store. On Thursday bloggers noticed Apple had censored the word, usi...

1AI score
SaveExploits0
Rows per page
Query Builder