Lucene search
+L

107 matches found

OSV
OSV
added 2022/03/01 12:00 a.m.31 views

ASB-A-209611539

In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

9.3CVSS7.7AI score0.00746EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/06 3:15 p.m.8 views

CVE-2021-0595

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

7.8CVSS7.2AI score0.00205EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/06 3:15 p.m.36 views

CVE-2021-0595

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

7.8CVSS0.00205EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/06 3:15 p.m.6 views

CVE-2021-0595

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

7.8CVSS7.4AI score0.00205EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/06 3:15 p.m.22 views

Design/Logic Flaw

In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

4.6CVSS7.7AI score0.00205EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2016/11/25 4:59 p.m.8 views

CVE-2016-6708

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or...

5.5CVSS7.3AI score0.00152EPSS
SaveExploits0References2
OSV
OSV
added 2016/11/25 4:59 p.m.7 views

UBUNTU-CVE-2016-6708

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or...

5.5CVSS6.4AI score0.00152EPSS
SaveExploits0References3
Rows per page
Query Builder