Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/03/04 1:57 a.m.1 views

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

4CVSS6.1AI score0.00003EPSS
Exploits0References1
OSV
OSV
added 2026/03/02 7:16 p.m.0 views

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

4CVSS5.9AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 6:42 p.m.1 views

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

4CVSS6.1AI score0.00003EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/03/02 6:42 p.m.17 views

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

0.00003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/02 6:42 p.m.0 views

CVE-2026-0024

In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

6.1AI score0.00003EPSS
Exploits0References1
CVE
CVE
added 2026/03/02 6:42 p.m.8 views

CVE-2026-0024

The CVE-2026-0024 issue is in Android’s MediaProvider.java (isRedactionNeededForOpenViaContentResolver). A missing permission check could reveal the location of media, causing local information disclosure with no extra privileges and without user interaction. The connected sources (NVD, Red Hat, ...

4CVSS6.1AI score0.00003EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-25550

Malicious code in bioql PyPI...

5.5CVSS5.6AI score0.00019EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:57 a.m.2 views

CVE-2023-21382

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00019EPSS
Exploits0References1
NVD
NVD
added 2023/10/30 6:15 p.m.14 views

CVE-2023-21382

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.2AI score0.00019EPSS
Exploits0References1
OSV
OSV
added 2023/10/30 6:15 p.m.0 views

CVE-2023-21382

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2023/10/30 6:15 p.m.18 views

Information disclosure

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

1.7CVSS5.8AI score0.00019EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/10/30 5:1 p.m.63 views

CVE-2023-21382

This CVE (CVE-2023-21382) concerns Android’s Content Resolver allowing local information disclosure due to a missing permission check. Affected: Android devices (Content Resolver metadata about content providers). Root cause: insufficient permission validation on access to content provider metada...

5.5CVSS5.2AI score0.00019EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/30 5:1 p.m.19 views

CVE-2023-21382

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5AI score0.00019EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/30 5:1 p.m.13 views

CVE-2023-21382

In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00019EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/10/30 12:0 a.m.2 views

PT-2023-18158 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information...

5.5CVSS5.1AI score0.00019EPSS
Exploits0References6
Rows per page
Query Builder