EUVD-2019-11835

Malware in sbrugna...

CVE-2019-2193

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

CVE-2019-2193

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

Design/Logic Flaw

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

CVE-2019-2193

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

CVE-2019-2193: Improper Privilege Management

In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...

PT-2019-16283

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue is related to a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, allowing an Admin app to be installed...

The vulnerability of the Device Policy Client service in the Android operating system’s Framework component allows a perpetrator to increase their privileges.

The vulnerability of the Device Policy Client DPC component of the Android operating system’s framework is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2017-0830

An elevation of privilege vulnerability in the Android framework device policy client. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498...

CVE-2017-0830

An elevation of privilege vulnerability in the Android framework device policy client. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498...

CVE-2017-0830: Incorrect Permission Assignment for Critical Resource

An elevation of privilege vulnerability in the Android framework device policy client. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62623498...

Google Android Framework elevation of privilege vulnerability (CNVD-2017-36348)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Framework device policy client is a device management framework. A privilege extraction vulnerability exists in Framework device policy client in Android. A remote attacke...