Lucene search
+L
Osv-asbRecent

351 matches found

osv-asb
osv-asb
•added 2026/10/01 12:00 a.m.•14 views

ASB-A-513582756

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS6AI score0.00223EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/10/01 12:00 a.m.•9 views

ASB-A-517377722

In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00068EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/10/01 12:00 a.m.•9 views

ASB-A-522372651

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.8AI score0.00073EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•13 views

ASB-A-461500706

In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•17 views

ASB-A-528209857

Bulletin has no description...

5.5CVSS5.7AI score0.00094EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•17 views

ASB-A-494585668

In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00088EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•12 views

ASB-A-490605007

In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00088EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•9 views

ASB-A-490286986

In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00103EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•17 views

ASB-A-505452999

In descramble of DescramblerImpl.cpp, there is a possible arbitrary memory access due to a precondition check failure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•16 views

ASB-A-464526458

In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in the background due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

7.8CVSS6.1AI score0.00077EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•14 views

ASB-A-473814675

In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00077EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•7 views

ASB-A-517360525

Bulletin has no description...

7.5CVSS5.7AI score0.00706EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•15 views

ASB-A-498720726

In multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.3AI score0.00101EPSS
SaveExploits0References4
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•10 views

ASB-A-515478004

Bulletin has no description...

7.8CVSS5.7AI score0.00125EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•7 views

ASB-A-517353300

Bulletin has no description...

7.5CVSS5.7AI score0.00706EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•12 views

ASB-A-489079565

Bulletin has no description...

7.2CVSS5.7AI score0.00097EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•8 views

ASB-A-482992246

In hidppprobe of hid-logitech-hidpp.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.4AI score0.0017EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•12 views

ASB-A-511640905

In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00096EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•14 views

ASB-A-470265726

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.9AI score0.00092EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•11 views

ASB-A-509319286

Bulletin has no description...

7.5CVSS5.7AI score0.00669EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•10 views

ASB-A-489979337

Bulletin has no description...

7.1CVSS5.7AI score0.00148EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•11 views

ASB-A-505471091

Bulletin has no description...

7.8CVSS5.7AI score0.00176EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•13 views

ASB-A-503554490

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5AI score0.00386EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•8 views

ASB-A-466091304

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.2AI score0.00096EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•33 views

ASB-A-479515555

In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local escalation with User execution privileges needed. User interaction is needed for exploitation...

4CVSS6AI score0.00092EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/09/01 12:00 a.m.•16 views

ASB-A-489675413

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00101EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•25 views

ASB-A-500172040

Bulletin has no description...

7.8CVSS5.7AI score0.00108EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•27 views

ASB-A-397217317

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00068EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•30 views

ASB-A-467994310

In multiple functions of ubsanthrowingruntime.cpp, there is a possible UBSan failure due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS6.8AI score0.00253EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•32 views

ASB-A-488940382

Bulletin has no description...

6.7CVSS5.7AI score0.00114EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•29 views

ASB-A-473812391

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00073EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•25 views

ASB-A-459639258

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root cause. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS7.3AI score0.00071EPSS
SaveExploits0References4
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•25 views

ASB-A-460933604

In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

3.3CVSS5.5AI score0.00082EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•29 views

ASB-A-485397908

In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00067EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•20 views

ASB-A-492104691

Bulletin has no description...

7.8CVSS5.7AI score0.00154EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•17 views

ASB-A-365086157

Bulletin has no description...

5.6AI score
SaveExploits0
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•28 views

ASB-A-438186009

In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00071EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•24 views

ASB-A-480745369

Bulletin has no description...

6.5CVSS5.7AI score0.00309EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•28 views

ASB-A-488896810

Bulletin has no description...

7.5CVSS5.7AI score0.0033EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•16 views

ASB-A-497208295

Bulletin has no description...

5.7AI score
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•21 views

ASB-A-463995203

In pngimagefinishread of pngrtran.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1CVSS6.9AI score0.00417EPSS
SaveExploits4References7
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•25 views

ASB-A-470966846

In multiple functions of ubsanthrowingruntime.cpp, there is a possible persistent denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS6.8AI score0.00253EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•26 views

ASB-A-488928601

Bulletin has no description...

7.5CVSS5.7AI score0.00312EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•24 views

ASB-A-488917582

Bulletin has no description...

7.5CVSS5.7AI score0.00323EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•25 views

ASB-A-463998243

In multiple locations, there is a possible way to achieve remote code execution due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.1CVSS7.3AI score0.00259EPSS
SaveExploits4References7
osv-asb
osv-asb
•added 2026/06/01 12:00 a.m.•24 views

ASB-A-339109116

In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.8AI score0.00079EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/04/01 12:00 a.m.•5 views

ASB-A-467765894

In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.8AI score0.00096EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2026/03/01 12:00 a.m.•16 views

ASB-A-415783046

In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00101EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/03/01 12:00 a.m.•20 views

ASB-A-430047417

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.9AI score0.001EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2026/03/01 12:00 a.m.•17 views

ASB-A-406243581

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.8AI score0.00098EPSS
SaveExploits0References2
Total number of security vulnerabilities351