PT-2022-14695 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: A logic error in the code of KeyguardNotificationVisibilityProvider.kt allows hidden notifications to be shown, potentially leading to local escalation of privilege without requiring additional executio...

PT-2022-9131 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible denial of service due to resource exhaustion in the findAllDeAccounts function of AccountsDb.java. This could lead to a local denial of service wit...

PT-2022-7242 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iCloud Photo Library versions prior to iOS 16.2 iCloud Photo Library versions prior to iPadOS 16.2 iCloud Photo Library versions prior to macOS Ventura 13.1 Description: The issue is related to a logic problem that has been addressed with...

PT-2022-26633 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 watchOS versions prior to 9.2 Description: Multiple issues were addressed by removing the vulnerable code. An app may be able to bypass Privacy...

PT-2022-26624 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.1 Description: An out-of-bounds write issue was addressed with improved input validation, allowing an app to potentially execute arbitrary code with kernel privileges. Recommendations: For versions prior to 13.1,...

PT-2022-7241 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 Description: The issue is related to the lack of protection for sensitive data in the networking component of macOS, iOS, and iPadOS operating...

PT-2022-14688 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to improper input validation in the bindRemoteViewsService function of AppWidgetServiceImpl.java. This could allow bypassing background activity launch...

PT-2022-14710 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue is related to an incorrect state transition in the updatePublicMode method of NotificationLockscreenUserManagerImpl.java. This could lead to local information disclosure wi...

PT-2022-14686 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible out of bounds read in the BNEP ConnectResp function of bnep api.cc. This could lead to local information disclosure over Bluetooth without requirin...

PT-2022-14699 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue is related to the createNotificationChannel function in NotificationManager.java, which can cause resource exhaustion, making the device unusable and requiring a factory...

PT-2022-14708 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: A logic error in the code of AccessibilityManager.java, specifically in the getEnabledAccessibilityServiceList function, allows for a possible way to hide an accessibility service...

PT-2022-26639 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: The issue allows an app to bypass Privacy preferences. It was addressed by...

PT-2022-14707 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible failure to persist permissions settings in the NotificationChannel of NotificationChannel.java due to resource exhaustion. This could lead to local...

CVE-2022-39913

Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T13 allows local attacker to access user profiles information...

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

CVE-2022-39912

Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T13 allows local attackers to set some setting value in Secure folder...

PT-2022-25106 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to T13 Description: The issue is related to improper handling of insufficient permissions in the setSecureFolderPolicy function within the PersonaManagerService. This allows local attackers to set certain setting values...

PT-2022-14711 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a possible out of bounds read in the fdt path offset namelen function of fdt ro.c due to an incorrect bounds check. This could lead to local information...

PT-2022-14691 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to an incorrect bounds check in the toLanguageTag function of LocaleListCache.cpp, which could lead to a possible out of bounds read. This might result in remote...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the enforceVisualVoicemailPackage of PhoneInterfaceManager.java in Google Android version 13.0, which stems from a privilege bypass issue. An attacker can exploit the...