Lucene search
+L

63 matches found

CVE
CVE
•added 2026/06/01 9:14 p.m.•56 views

CVE-2026-28586

The Android operating system framework is affected by a permissions bypass vulnerability in multiple functions of AppOpsService.java . Due to a missing permission check, an attacker could cause local information disclosure without requiring additional execution privileges or user interaction. Whi...

3.3CVSS5.9AI score0.00083EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/01 9:14 p.m.•28 views

CVE-2026-28586

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00083EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/01 12:00 a.m.•23 views

ASB-A-477935679

Bulletin has no description...

5.8AI score
SaveExploits0
OSV
OSV
•added 2026/03/02 7:16 p.m.•25 views

CVE-2026-0014

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS5.8AI score0.00116EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/02 6:42 p.m.•50 views

CVE-2026-0015

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00098EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/02 6:42 p.m.•21 views

EUVD-2026-9233

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS6.1AI score0.00098EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/02 6:42 p.m.•6 views

CVE-2026-0015

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00098EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/02 6:42 p.m.•10 views

CVE-2026-0014

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS5.8AI score0.00116EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/02 6:42 p.m.•56 views

CVE-2026-0014

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00116EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/02 6:42 p.m.•9 views

CVE-2026-0014

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score0.00116EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/02 6:42 p.m.•63 views

CVE-2026-0014

A Denial of Service (DoS) vulnerability exists in the AppOpsService.java component of the Android Framework due to improper input validation in the isPackageNullOrSystem function. This flaw could allow a malicious party to cause a persistent local denial of service without requiring additional ex...

6.2CVSS5.8AI score0.00116EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•1 views

CVE-2026-0014: Improper Input Validation

In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS5.8AI score0.00116EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:13 a.m.•20 views

CVE-2019-2220

In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This could lead to local information disclosure no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS6.2AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:36 a.m.•17 views

CVE-2024-34738

In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

7.8CVSS7AI score0.00082EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 5:27 p.m.•12 views

CVE-2025-48590

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...

5.5CVSS5.9AI score0.00098EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/08 5:16 p.m.•14 views

CVE-2025-48590

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...

5.5CVSS5.9AI score0.00098EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/08 4:57 p.m.•51 views

CVE-2025-48590

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...

0.00098EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/08 4:57 p.m.•8 views

CVE-2025-48590

In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is...

5.5AI score0.00098EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/08 12:00 a.m.•12 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in Google Android that stems from a resource exhaustion issue in the AppOpsService file, which could lead to a local denial of service...

5.5CVSS6AI score0.00098EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-1625

Malware in sbrugna...

5.5CVSS5.6AI score0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder