Lucene search
+L

4408 matches found

Prion
Prion
•added 2023/03/24 8:15 p.m.•27 views

Out-of-bounds

In EUTRANLCSConvertLCSMOLRReq of LPPCommonUtil.c, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

5.8CVSS7.3AI score0.00539EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•16 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a logic error where the lock screen may be delayed...

7.8CVSS7.3AI score0.001EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•15 views

Google Pixel 安全漏洞

Google Pixel, a smartphone from Google, is vulnerable to a logic error in the buildCommand of bluetoothccc.cc, which can be exploited to cause elevation of privileges...

7.8CVSS6.8AI score0.001EPSS
SaveExploits0References2
Mend
Mend
•added 2023/03/24 12:00 a.m.•2 views

CVE-2023-20917

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

8.5CVSS0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•36 views

CVE-2023-21024

In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

7.9AI score0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/03/24 12:00 a.m.•7 views

CVE-2023-21040

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8AI score0.001EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•23 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a logic error in the code and has the potential to gain dangerous privileges without the user's consent...

7.8CVSS7.4AI score0.00105EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•41 views

CVE-2023-21040

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•73 views

CVE-2023-21036

In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernelAndroid ID: A-264261868References: N/A...

5.6AI score0.00499EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•28 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a logic error in the code that may fail to truncate images...

5.5CVSS7AI score0.00499EPSS
SaveExploits2References3
Mend
Mend
•added 2023/03/24 12:00 a.m.•3 views

CVE-2023-20971

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

8.5CVSS0.00105EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•40 views

CVE-2023-20971

In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

7.9AI score0.00105EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•20 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a possible logic error in the code...

7.5CVSS7.3AI score0.00476EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•6 views

PT-2023-17784

Name of the Vulnerable Software and Affected Versions Android versions Android-13 Description The issue is related to a logic error in the code of CustomizedSensor.cpp, specifically in the captureImage function. This error can be exploited to bypass the fingerprint unlock, potentially leading to...

7.8CVSS0.00092EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•19 views

PT-2023-14131 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is caused by a logic error in the code of ffa mrd prot in shared mem.c. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS5.1AI score0.00133EPSS
SaveExploits0References3
CVE
CVE
•added 2023/03/24 12:00 a.m.•97 views

CVE-2023-20995

CVE-2023-20995 concerns a logic error in the Fingerprint workflow within Android 13. In code path captureImage of CustomizedSensor.cpp, the flaw can bypass fingerprint unlock, enabling local elevation of privilege without additional execution privileges and without user interaction. Affected prod...

7.8CVSS7.7AI score0.00092EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/24 12:00 a.m.•11 views

CVE-2023-20995

In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8AI score0.00092EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/24 12:00 a.m.•8 views

CVE-2023-21027: Improper Authentication

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

7.5CVSS6AI score0.00476EPSS
SaveExploits0References2
CVE
CVE
•added 2023/03/24 12:00 a.m.•154 views

CVE-2023-20971

CVE-2023-20971 affects the Android Framework in PermissionManagerServiceImpl.java (removePermission) where a logic error could allow obtaining dangerous permissions without user consent, enabling local elevation of privilege with no extra execution privileges and no user interaction needed. The i...

7.8CVSS7.7AI score0.00105EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/24 12:00 a.m.•4 views

CVE-2023-21026: Improper Check or Handling of Exceptional Conditions

In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6AI score0.00089EPSS
SaveExploits0References2
Rows per page
Query Builder