CVE-2020-0289

In PackageManager, there is a missing permission check. This could lead to local information disclosure across users with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153996872...

CVE-2020-0288

In PackageManager, there is a missing permission check. This could lead to local information disclosure across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153995991...

CVE-2020-0288

CVE-2020-0288 concerns Android 11’s PackageManager, where a missing permission check could enable local information disclosure across user boundaries without any user interaction. The issue is tied to the Android 11 platform and is documented in the Android 11 Security Release Notes; Red Hat and ...

CVE-2020-0366

In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app set as the default Assist app with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2020-0345

In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144286721...

CVE-2020-0345

CVE-2020-0345 affects Android 11 DocumentsUI, enabling a local elevation of privilege via a permission bypass (confused deputy). Impact: partial/full escalation on affected builds; CVSS v3.1: LOCAL, LOW complexity, UI REQUIRED, with HIGH confidentiality, integrity, and availability impacts. Root ...

CVE-2020-0341

In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144920149...

CVE-2020-0341

CVE-2020-0341 affects Android 11; a missing permission check in DisplayManager may allow local escalation of privilege without user interaction. The issue is categorized as Elevation of Privilege (EoP). No exploit details are provided in the sources. Remediation: Android 11 security release notes...

CVE-2020-0277

In NetworkPolicyManagerService, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege allowing a malicious app to modify the device's data plan with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0277

Summary (CVE-2020-0277) : The vulnerability affects Android 11 in the NetworkPolicyManagerService . It arises from a missing permission check , allowing a local attacker to perform a permissions bypass and achieve local elevation of privilege to modify the device’s data plan without any extra exe...

CVE-2020-0130

In screencap, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege in a system process with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-0130

CVE-2020-0130 affects Android 11 screencap. The issue is command injection due to improper input validation in screencap, enabling local elevation of privilege with User-level privileges and no user interaction required. Impact is local, affecting system processes; exploitation would require acce...

CVE-2020-0333

CVE-2020-0333 affects Android 11. The issue resides in the UrlQuerySanitizer component, where improper input validation could allow remote code execution. The vulnerability is exploitable with network access and does not require user interaction, with a high to critical impact depending on the me...

CVE-2020-0337

CVE-2020-0337 affects Android 11 in the MediaProvider component, where a permissions-check bypass can occur due to a confused deputy, enabling local information disclosure without user interaction. Affected product: Android 11 (Android framework). Root cause: flawed permission check leading to in...

CVE-2020-0337

In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124329382...

CVE-2020-0275

In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0267

In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a malicious app instead of the one the user intended, with no additional execution privileges needed. User interaction is needed for...

CVE-2020-0330

In iorap, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege and code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150331085...

CVE-2020-0386

In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege allowing an attacker to set Bluetooth discoverability with User execution privileges needed. User interaction is needed for...

CVE-2020-0390

In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157598026...