CVE-2024-43769

In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2018-9377

In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9374

In installPackageLI of PackageManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43086

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Huawei HarmonyOS/EMUI Permission Issues Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS/EMU...

CVE-2024-47291

Permission vulnerability in the ActivityManagerService AMS module Impact: Successful exploitation of this vulnerability may affect availability...

PT-2024-32503 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permission vulnerability in the ActivityManagerService AMS module. Successful exploitation of this vulnerability may affect availability. There is no information...

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS/EMU...

CVE-2024-34637

Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on starting services from the background...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2024 Release 1 version and earlier versions, which stems from the WindowManagerServi...

PT-2024-5715 · Microsoft · Windows Resource Manager Psm Service Extension +1

Name of the Vulnerable Software and Affected Versions: Windows Resource Manager PSM Service Extension affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. This can allow an attacker t...

CVE-2024-34608

Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

PT-2024-26023 · Unknown · Paymentmanagerservice

Name of the Vulnerable Software and Affected Versions: PaymentManagerService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in the PaymentManagerService, allowing local attackers to bypass restrictions on starting services from the background...

CVE-2024-31331

In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

CVE-2024-31316

In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-23975 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the setMimeGroup function of PackageManagerService.java. This error can lead to a service being hidden from Settings, potentially resulting in local...

PT-2024-23968 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to improper input validation in the updateServicesLocked method of AccessibilityManagerService.java. This could allow an app to be hidden from settings while retaining...

PT-2024-23964 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to a parcel mismatch in the onResult method of AccountManagerService.java, which could allow an arbitrary background activity launch. This could lead to local...

Microsoft Windows Container Manager Service Backlink Vulnerability

Microsoft Windows Container Manager Service is an application from Microsoft Corporation USA. It provides a function to manage windows containers. A backlink vulnerability exists in Microsoft Windows Container Manager Service. An attacker can exploit the vulnerability to elevate privileges. The...