2042 matches found
CVE-2022-28542
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission...
CVE-2022-28542
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission...
CVE-2022-28542
CVE-2022-28542 : Samsung Galaxy Store before version 4.5.40.5 suffers from improper sanitization of incoming intents. This allows a local attacker to access privileged content providers using Galaxy Store permissions. Root cause is inadequate input sanitization of intents; affected software is Ga...
CVE-2020-23349
An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...
CVE-2020-23349
An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...
Authentication flaw
An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...
CVE-2020-23349
An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 com.sina.weibo.sdk.share.WbShareTransActivity, any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity...
CVE-2020-23349
CVE-2020-23349 concerns the Sina Weibo Android SDK 4.2.7, where a vulnerability in the internal activity flow of com.sina.weibo.sdk.share.WbShareTransActivity allows any unexported activities to be started by this component via an intent redirection issue. The impact, as described in connected so...
Samsung SettingsReceiver PendingIntent Hijacking Vulnerability
Samsung SettingsReceiver is a component in Samsung Samsung mobile devices. Samsung SettingsReceiver suffers from a PendingIntent hijacking vulnerability that originates from unauthorized access in SettingsReceiver, which can be exploited by a local attacker to gain unauthorized access to media...
CVE-2021-39746
In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in the ConnectedDevicesSliceProvider.java createBluetoothDeviceSlice, the PendingIntent bypasses privileges and can be exploited to cau...
PT-2022-11035 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12L Description: The issue is related to a possible permission bypass in the PermissionController due to an unsafe PendingIntent. This could lead to local information disclosure, requiring User execution privileges fo...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a vulnerability in ConnectedDevicesSliceProvider.java.java's createGeneralSlice, PendingIntent bypasses privileges and can be exploited...
CVE-2021-39709
In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Google Android unspecified vulnerability
Google Android is a Linux-based open source operating system from Google, Inc. An unspecified vulnerability exists in Google Android, which can be exploited by local attackers to access media files in the knoxprivacynotifyreceiver via an implicit Intent...
CVE-2022-24000
PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...
CVE-2022-24000
PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...
CVE-2022-24000
PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent...