Google Android suffers from unspecified vulnerability (CNVD-2023-9748548)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android suffers from unspecified vulnerability (CNVD-2023-9767724)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

Google Android suffers from unspecified vulnerability (CNVD-2023-9748845)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android has an unspecified vulnerability (CNVD-2023-9748449)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android suffers from unspecified vulnerability (CNVD-2023-9749042)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. No details of the vulnerability are provided at this time...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from the US-based Google Inc. Google Android suffers from a security vulnerability that stems from the possibility of local privilege escalation...

CVE-2023-32832

creationtimestamp| type| source ---|---|--- 2023-11-06 07:30:34+00:00| seen| https://t.me/cibsecurity/73565 2024-06-13 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/06/driving-forward-in-android-drivers.html 2024-06-13 21:56:45+00:00| published-proof-of-concept|...

Pixel Update Bulletin—November 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2023-11-01 or later address all issues in this bulletin and all issues in the November 2023 Android...

CVE-2023-46139 KernelSU signature validation mismatch

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelSU installed device is infected with a malware whose app signing block specially constructed, it can take over root privileges on the device. The vulnerable verification logic...

Google Android elevation of privilege vulnerability (CNVD-2024-02335)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android due to an insecure PendingIntent in the createQuickShareAction of SaveImageInBackgroundTask.java, which can be exploited by an attacker to elevate privileges...

Pixel Watch Security Bulletin—September 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2023-09-05 or later address all applicable issues in the September 2023 Android Security Bulletin and all issues in this...

Wear OS Security Bulletin—September 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Wear OS Security Bulletin contains details of security vulnerabilities affecting the Wear OS platform. The full Wear OS update comprises the security patch level of 2023-09-05 or later from the September 2023 Android Security Bulletin in addition to all issues in this bulletin. We encourage a...

ASB-A-223793631

In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2023-4361

Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2023-18057 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a logic error in the code that allows the microphone privacy indicator to be obscured in multiple locations. This could lead to...

Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China

Two file management apps on the Google Play Store have been discovered to be spyware, putting the privacy and security of up to 1.5 million Android users at risk. These apps engage in deceptive behaviour and secretly send sensitive user data to malicious servers in China. Pradeo, a leading mobile...

Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China

Two file management apps on the Google Play Store have been discovered to be spyware, putting the privacy and security of up to 1.5 million Android users at risk. These apps engage in deceptive behaviour and secretly send sensitive user data to malicious servers in China. Pradeo, a leading mobile...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. Attackers have exploited the vulnerability to cause local information leakage...

CVE-2023-21203

In startWpsPbcInternal of staiface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID...

CVE-2023-21194

The CVE-2023-21194 entry concerns Android 13 Bluetooth stack (gatt_utils.cc: gatt_dbg_op_name). A missing bounds check allows an out-of-bounds read, enabling local information disclosure via the Bluetooth server. Exploitation requires System privileges; no user interaction is needed. Public detai...