Lucene search
+L

107 matches found

Positive Technologies
Positive Technologies
added 2021/03/10 12:00 a.m.8 views

PT-2021-13048 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is caused by a logic error in the code of CrossProfileAppsServiceImpl.java, which can lead to an application's INTERACT ACROSS PROFILES grant state not displaying properly in the setting UI...

7.8CVSS7.7AI score0.00143EPSS
SaveExploits0References3
OSV
OSV
added 2020/10/14 2:15 p.m.9 views

CVE-2020-0419

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.7AI score0.00155EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/14 2:15 p.m.31 views

CVE-2020-0419

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS0.00155EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2020/10/14 2:15 p.m.6 views

CVE-2020-0419

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.4AI score0.00155EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/10/14 1:02 p.m.77 views

CVE-2020-0419

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.4AI score0.00155EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/14 1:02 p.m.230 views

CVE-2020-0419

CVE-2020-0419 involves Android’s PackageInstallerSession.java, where generateInfo can leak cross-profile URI data during app installation due to a missing permission check. The issue affects Android 8.1–11 and is described as local information disclosure with no authentication or user interaction...

5.5CVSS5AI score0.00155EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/10/01 12:00 a.m.37 views

ASB-A-142125338

In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.1AI score0.00155EPSS
SaveExploits0References2
Rows per page
Query Builder