EUVD-2022-25405

Malicious code in bioql PyPI...

The vulnerability of the `startLegacyVpnPrivileged` component in Android operating systems allows a hacker to elevate their privileges.

The vulnerability of the startLegacyVpnPrivileged component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

PT-2022-3185

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a protocol downgrade attack in the startLegacyVpnPrivileged component of Vpn.java, which could allow retrieval of VPN credentials. This might lead to remote escalation of privileg...