Lucene search
+L

5396 matches found

attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•10 views

CVE-2022-20299

In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/12 3:15 p.m.•15 views

CVE-2022-20296

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/12 3:15 p.m.•14 views

CVE-2022-20294

In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/12 3:15 p.m.•31 views

CVE-2022-20311

In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...

3.3CVSS0.00094EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/12 3:15 p.m.•31 views

CVE-2022-20301

In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS0.00095EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•11 views

CVE-2022-20281

In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

7.8CVSS5.9AI score0.001EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•20 views

CVE-2022-20284

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/12 3:15 p.m.•11 views

CVE-2022-20274

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206470146...

7.8CVSS7.2AI score0.00096EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/12 3:15 p.m.•16 views

CVE-2022-20281

In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

7.8CVSS5.9AI score0.001EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/12 3:15 p.m.•12 views

CVE-2022-20284

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/12 3:15 p.m.•27 views

CVE-2022-20281

In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

7.8CVSS0.001EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/12 3:15 p.m.•26 views

CVE-2022-20284

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

5.5CVSS0.00095EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/12 3:15 p.m.•14 views

CVE-2022-20259

In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-221431393...

5.5CVSS5.9AI score0.00095EPSS
SaveExploits0References1
OSV
OSV
•added 2022/08/12 3:15 p.m.•13 views

CVE-2022-20267

In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

3.3CVSS5.9AI score0.00091EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/12 3:15 p.m.•13 views

CVE-2022-20267

In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

3.3CVSS5.9AI score0.00091EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/12 3:15 p.m.•31 views

CVE-2022-20255

In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.4CVSS0.00092EPSS
SaveExploits0References1
Prion
Prion
•added 2022/08/12 3:15 p.m.•30 views

Default credentials

In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

3.2CVSS5.7AI score0.00092EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/08/12 3:15 p.m.•24 views

Privilege escalation

In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Androi...

4.4CVSS7.8AI score0.00111EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/08/12 3:15 p.m.•21 views

Information disclosure

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

1.7CVSS5.5AI score0.00095EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/08/12 3:15 p.m.•27 views

Information disclosure

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

1.7CVSS5.5AI score0.00095EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder