CVE-2017-0421

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application...

CVE-2017-0411

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0411

CVE-2017-0411 is an elevation-of-privilege vulnerability in the Android Framework APIs that could let a local malicious application execute arbitrary code within a privileged process. Affected product: Android (Framework APIs). Vulnerable versions (per initial entry): Android 7.0 and 7.1.1 (Andro...

CVE-2017-0410

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0411

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0412

CVE-2017-0412 is an elevation-of-privilege vulnerability in Android Framework APIs that could let a local malicious app execute code with a privileged process. Affected: Android 7.0 and 7.1.1. Root cause involves Framework APIs enabling privilege escalation; Android patch levels 2017-02-01 / 2017...

CVE-2017-0421

CVE-2017-0421 is an information-disclosure vulnerability in the Android Framework APIs that could allow a local malicious app to bypass OS protections and access data it should not. Affected products/versions per the CVE entry include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. In the conne...

CVE-2017-0421

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application...

CVE-2017-0411: Time-of-check Time-of-use (TOCTOU) Race Condition

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

PT-2017-2395

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 7.1.1 Description An elevation of privilege issue in the Framework APIs could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue could be used to ga...

PT-2017-10562

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An information disclosure issue in the Framework APIs could allow a local malicious application to bypass operating system protections, potentially gaining access to data that t...

CVE-2017-0412: Time-of-check Time-of-use (TOCTOU) Race Condition

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

PT-2017-2396

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 7.1.1 Description An elevation of privilege issue in the Framework APIs could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue could be used to ga...

CVE-2017-0421: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application...

PT-2017-2397

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.1 Description An elevation of privilege issue in the Framework APIs could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue could be used to...

CVE-2017-0410: Integer Overflow or Wraparound

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-3241

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: RMI. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with...

macOS 10.12.1 / iOS Kernel - IOService::matchPassive Use-After-Free Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=973 IOService::matchPassive is called when trying to match a request dictionary against a candidate IOService. We can call this function on a controlled IOService with a...

Google Android Framework APIs Remote Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A remote elevation of privilege vulnerability exists in the Google Android Framework APIs. A remote...

CVE-2017-0383

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...