Lucene search
+L

109 matches found

Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.10 views

PT-2023-18105 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in Activity Manager, which could allow an attacker to determine whether an app is installed. This could lead to local information disclosu...

5.5CVSS5.1AI score0.00099EPSS
Exploits0References3
OSV
OSV
added 2023/10/06 7:15 p.m.5 views

CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2023/10/06 7:15 p.m.7 views

UBUNTU-CVE-2023-21266

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00113EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/10/06 12:0 a.m.13 views

PT-2023-18047 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the killBackgroundProcesses function of ActivityManagerService.java, which could allow escaping Google Play protection. This might lead to...

7.8CVSS6.8AI score0.00113EPSS
Exploits0References13
CNNVD
CNNVD
added 2023/08/14 12:0 a.m.8 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from a messy proxy in the openContentUri module of ActivityManagerService.java, which can be exploited by an attacker to obtain sensitive...

5.5CVSS6.1AI score0.0009EPSS
Exploits0References3
OSV
OSV
added 2023/06/15 7:15 p.m.5 views

CVE-2023-21131

In checkKeyIntentParceledCorrectly of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error in the code. This could lead to local escalation of privilege and the ability to launch arbitrary activities in settings with no additional execution...

7.8CVSS6AI score0.0009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/15 12:0 a.m.8 views

PT-2023-17923 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A logic error in the checkKeyIntentParceledCorrectly function of ActivityManagerService.java can lead to a bypass of Parcel Mismatch mitigations. This issue could result in local...

7.8CVSS6.9AI score0.0009EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/05/15 12:0 a.m.5 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a privilege bypass in registerReceiverWithFeature of ActivityManagerService.java. An attacker can exploit the vulnerability to elevate...

8.4CVSS7.1AI score0.00084EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/05/15 12:0 a.m.9 views

PT-2023-17909 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the registerReceiverWithFeature method of ActivityManagerService.java. This could allow isolated processes to register a broadcast receiver, potentially...

8.4CVSS7.2AI score0.00084EPSS
Exploits0References5
OSV
OSV
added 2023/05/04 9:15 p.m.3 views

CVE-2023-21496

Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level...

5.5CVSS6.1AI score0.00176EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/05/04 12:0 a.m.6 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability in SAMSUNG Mobile devices SMR May-2023 Release 1 previously existed in ActivityManagerService that allowed an attacker to use...

6.1CVSS5.7AI score0.00176EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/04 12:0 a.m.7 views

PT-2023-18250 · Unknown · Activitymanagerservice

Name of the Vulnerable Software and Affected Versions: ActivityManagerService versions prior to SMR May-2023 Release 1 Description: The issue allows an attacker to utilize a debug function by setting the debug level, potentially exploiting the Active Debug Code vulnerability in...

6.1CVSS5.5AI score0.00176EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.5 views

CVE-2022-20320

In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

3.3CVSS5.9AI score0.00097EPSS
Exploits0References2
OSV
OSV
added 2022/08/12 3:15 p.m.3 views

CVE-2022-20320

In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

3.3CVSS5.9AI score0.00097EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.4 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS5.9AI score0.00089EPSS
Exploits0References2
OSV
OSV
added 2022/08/12 3:15 p.m.6 views

CVE-2022-20263

In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of app usage with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...

5.5CVSS5.9AI score0.0009EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.3 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android 13, which stems from a possible method to determine if an application is installed without querying permissions due to side-channel information leakage ...

3.3CVSS5AI score0.00097EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.4 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from the disclosure of installed packets due to a lack of permission checking in ActivityManager. An attacker can exploit this vulnerabilit...

3.3CVSS6.1AI score0.00089EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/08/11 12:0 a.m.2 views

PT-2022-14540 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in ActivityManager, which could lead to the disclosure of installed packages. This results in local information disclosure without requiring additiona...

3.3CVSS3.4AI score0.00089EPSS
Exploits0References2
OSV
OSV
added 2021/04/09 6:15 p.m.5 views

CVE-2021-25363

An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files...

6.1CVSS6.4AI score0.00106EPSS
Exploits0References2
Rows per page
Query Builder