Lucene search
+L

48 matches found

OSV
OSV
•added 2016/11/25 4:59 p.m.•15 views

CVE-2016-6703

A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This...

7.8CVSS8AI score0.00963EPSS
SaveExploits0References2
OSV
OSV
•added 2016/11/25 4:59 p.m.•29 views

UBUNTU-CVE-2016-6703

A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This...

7.8CVSS7.9AI score0.00963EPSS
SaveExploits0References3
CNVD
CNVD
•added 2016/11/10 12:00 a.m.•13 views

Google Android Runtime Library Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Android runtime ART is the runtime environment of the Android system. A remote code execution vulnerability exists in ART in Android. An attacker can exploit the vulnerability...

7.8CVSS8.5AI score0.00963EPSS
SaveExploits0References1
Prion
Prion
•added 2016/10/31 10:59 a.m.•26 views

Design/Logic Flaw

On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually...

7.8CVSS6.8AI score0.00604EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2016/09/16 5:59 a.m.•37 views

Design/Logic Flaw

Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, which might allow remote attackers to obtain sensitive information by leveraging access to a network over which analytics data is sent...

5CVSS6.6AI score0.03803EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/09/16 12:00 a.m.•5 views

CVE-2016-6936: Exposure of Sensitive Information to an Unauthorized Actor

Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, which might allow remote attackers to obtain sensitive information by leveraging access to a network over which analytics data is sent...

7.5CVSS7.3AI score0.03803EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2015/10/06 5:59 p.m.•26 views

CVE-2015-3865

The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23050463...

9.3CVSS5.9AI score0.00618EPSS
SaveExploits0References4
ThreatPost
ThreatPost
•added 2015/10/05 4:34 p.m.•26 views

Google Patches Stagefright 2.0 in Android OTA Nexus Update

Google today patched the latest round of Stagefright vulnerabilities in Android, pushing them out as part of its latest over-the-air update to Nexus devices. Stagefright 2.0, as it’s come to be known, affected the Stagefright media playback engine in Android and one billion devices dating back to...

0.7AI score
SaveExploits0References4
Rows per page
Query Builder