Lucene search
+L

2835 matches found

Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.7 views

CVE-2022-38689

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.2AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/14 12:0 a.m.48 views

CVE-2022-38688

CVE-2022-38688 : The telephony service contains a missing permission check that enables local information disclosure without additional execution privileges. The NVD entry assigns a CVSS v3.1 base score of 5.5 (Local exploit, Low complexity, Low privileges required; Confidentiality impact: High)....

5.5CVSS5.2AI score0.00146EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.8 views

PT-2022-24528 · Unknown · Telephony Service

Name of the Vulnerable Software and Affected Versions: Telephony service affected versions not specified Description: The issue is related to a missing permission check in the telephony service, which could lead to local information disclosure without requiring additional execution privileges...

5.5CVSS5.2AI score0.00146EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/10/14 12:0 a.m.10 views

UNISOC chipset 安全漏洞

UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in UNISOC chipset, which stems from a lack of privilege checking in telephony services, and can be exploited by an attacker to potentially cause the disclosure of local information. Th...

5.5CVSS5.8AI score0.00146EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.3 views

CVE-2022-38688

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.2AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.23 views

CVE-2022-38688

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5AI score0.00146EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/11 12:0 a.m.48 views

Multiple MediaTek chips telephony elevation of privilege vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. An elevation of privilege vulnerability exists in several MediaTek chips telephony, which stems from a mismatch in the package format and can be exploited by an attacker to conduct elevation of privilege...

7.8CVSS7.6AI score0.00103EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/07 8:15 p.m.6 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.8CVSS7.3AI score0.00103EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/07 8:15 p.m.7 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.8CVSS5.9AI score0.00103EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/07 8:15 p.m.20 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.8CVSS0.00103EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/07 8:15 p.m.15 views

Privilege escalation

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

4.3CVSS7.7AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.27 views

CVE-2022-26471

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...

7.9AI score0.00103EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.5 views

PT-2022-17884 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privileg...

7.8CVSS7.6AI score0.00103EPSS
SaveExploits0References3
CVE
CVE
added 2022/10/07 12:0 a.m.115 views

CVE-2022-26471

CVE-2022-26471 affects MediaTek telephony components. The root cause is a package/parcel format mismatch that enables local privilege escalation with no additional execution privileges or user interaction required. The NVD entry reports a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vecto...

7.8CVSS7.7AI score0.00103EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/10/03 12:0 a.m.7 views

MediaTek 芯片代码问题漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. An elevation of privilege vulnerability exists in several MediaTek chips telephony, which stems from a mismatch in the package format and can be exploited by an attacker to conduct elevation of privilege...

7.8CVSS7AI score0.00103EPSS
SaveExploits0References3
OSV
OSV
added 2022/10/01 12:0 a.m.10 views

ASB-A-234037999

In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.3AI score0.00103EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:0 a.m.14 views

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS allows attackers to circumvent security restrictions.

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

7.8CVSS7.4AI score0.03673EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:0 a.m.12 views

The vulnerability of the SprdContactsProvider implementation in the Telephony component of Android operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SprdContactsProvider implementation in the Telephony component of Android operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, acting remotely, to gain unauthorized access to protected...

6.5CVSS6.5AI score0.00298EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.9 views

CVE-2022-20326

In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-185235527...

5.5CVSS6.1AI score0.00095EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/12 3:15 p.m.7 views

CVE-2022-20326

In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-185235527...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References1
Rows per page
Query Builder