38 matches found
PUB-A-486819784
In onCreate of multiple files, there is a possible unauthorized deletion of face unlock data due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48598
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-201760
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48598
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48598
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48598
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48598
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48598
Technical details (affected products, vulnerable components, fixes) are not provided in the connected documents. Monitor for updates from vendors (Android, Red Hat, ENISA OSV) for concrete impact, affected products, and patches.
CVE-2025-48598: Externally Controlled Reference to a Resource in Another Sphere
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-418774489
In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2023-46311
Malicious code in bioql PyPI...
EUVD-2023-50938
Malicious code in bioql PyPI...
EUVD-2023-58084
Malicious code in bioql PyPI...
PT-2025-43483
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists that may allow alteration of the primary user's face unlock settings due to a confused deputy condition. Successful exploitation could lead to physical escalation of privilege without...
CVE-2023-5801
Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2023-41819
A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers...
CVE-2023-46771
Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-41819
A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers...
CVE-2023-41819
The CVE-2023-41819 entry concerns Motorola Face Unlock with a PendingIntent hijacking flaw that could allow a local attacker to access unauthorized content providers. Affected component: Motorola Face Unlock app. Root cause: PendingIntent hijacking vulnerability. Exploitation status is not descri...
Motorola Face Unlock 安全漏洞
Motorola Face Unlock is a face unlocking application from Motorola USA. A security vulnerability exists in Motorola Face Unlock that stems from the presence of a hijacking vulnerability that could allow a local attacker to access unauthorized content providers...