Lucene search
K

9 matches found

OSV
OSV
added 2023/12/04 11:15 p.m.0 views

CVE-2023-40097

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score
Exploits0References2
Cvelist
Cvelist
added 2023/12/04 10:40 p.m.14 views

CVE-2023-40097

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

8AI score0.00029EPSS
Exploits0References2
OSV
OSV
added 2023/12/01 12:0 a.m.24 views

ASB-A-295334906

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7.8AI score0.00029EPSS
Exploits0References2
CNVD
CNVD
added 2023/09/12 12:0 a.m.6 views

Google Android elevation of privilege vulnerability (CNVD-2024-13714)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by an agent in hasPermissionForActivity of PackageManagerHelper.java. An attacker can exploit this vulnerability to escalate privileges...

7.8CVSS7AI score0.00017EPSS
Exploits0References1
NVD
NVD
added 2023/09/11 9:15 p.m.14 views

CVE-2023-35682

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7.8AI score0.00017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/09/11 8:9 p.m.4 views

CVE-2023-35682

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.2AI score0.00017EPSS
Exploits0References2
CVE
CVE
added 2023/09/11 8:9 p.m.128 views

CVE-2023-35682

CVE-2023-35682 affects Android components via a flaw in hasPermissionForActivity in PackageManagerHelper.java, enabling a confused deputy to start arbitrary components and potentially achieve local elevation of privilege. Exploitation requires user interaction, and the base CVSS indicates local a...

7.8CVSS7.7AI score0.00017EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.2 views

PT-2023-25267 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to the hasPermissionForActivity function in PackageManagerHelper.java, where a confused deputy could allow starting arbitrary components. This could lead to local...

7.8CVSS7.5AI score0.00017EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/09/08 12:0 a.m.1 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by an agent in hasPermissionForActivity of PackageManagerHelper.java. An attacker can exploit this vulnerability to escalate privileges...

7.8CVSS7.2AI score0.00017EPSS
Exploits0References5
Rows per page
Query Builder