EUVD-2022-25405

Malicious code in bioql PyPI...

The vulnerability of the `startLegacyVpnPrivileged` component in Android operating systems allows a hacker to elevate their privileges.

The vulnerability of the startLegacyVpnPrivileged component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...