Platform
Android
6,158 known vulnerabilities.
314 results · Clear filters · Feed
-
Unscored —CVE-2023-21173 Public exploit
In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due t…
-
Critical 9.8
MStore API <= 3.9.2 - Authentication Bypass
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it p…
-
High 7.8CVE-2023-21109 Public exploit
In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error …
-
Medium 6.2CVE-2023-21118 Public exploit
In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lea…
-
High 7.8CVE-2023-21094 Public exploit
In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due…
-
High 7.8CVE-2023-21086 Public exploit
In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC …
-
High 7.8CVE-2023-21097 Public exploit
In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This co…
-
Medium 5.5CVE-2023-20909 Public exploit
In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. …
-
Medium 5.5CVE-2023-21036 Public exploit
In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidV…
-
High 7.8CVE-2023-20955 Public exploit
In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and unin…
-
High 7.8
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional…
KEV Apr 13, 2023 -
High 7.8CVE-2023-20911 Public exploit
In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due …
-
High 7.8CVE-2023-20943 Public exploit
In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a pat…
-
High 8.1CVE-2023-20938 Public exploit
In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. …
-
High 7.8CVE-2023-20933 Public exploit
In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could l…
-
High 7.8CVE-2023-20944 Public exploit
In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization.…
-
High 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
KEV Feb 14, 2023 -
High 7.8CVE-2023-20904 Public exploit
In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mism…
-
High 7.3CVE-2023-20921 Public exploit
In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility se…
-
High 7.8CVE-2022-20493 Public exploit
In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. …
-
Medium 5.5CVE-2022-20494 Public exploit
In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could…
-
High 8.8
If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could hav…
-
High 8.8
Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of a…
KEV Mar 7, 2022 -
High 8.8CVE-2022-20607 Public exploit
In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead …
-
High 7.8CVE-2022-20470 Public exploit
In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch du…
-
High 7.8CVE-2022-20474 Public exploit
In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a co…
-
Critical 9.8CVE-2022-20473 Public exploit
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …
-
High 7.8CVE-2022-20452 Public exploit
In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused…
-
Unscored —CVE-2022-20413 Public exploit
In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. …
-
Unscored —CVE-2022-20421 Public exploit
In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could l…
-
Unscored —CVE-2022-20409 Public exploit
In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to…
-
Critical 9.8CVE-2022-36934 Public exploit
An integer overflow in WhatsApp could result in remote code execution in an established video call.
-
Low 3.3CVE-2022-20338 Public exploit
In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input …
-
Medium 6.5CVE-2022-20361 Public exploit
In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weak…
-
Medium 6.2CVE-2022-20360 Public exploit
In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local esca…
-
Unscored —CVE-2021-39696 Public exploit
In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation…
-
Unscored —CVE-2022-20229 Public exploit
In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing…
-
Unscored —CVE-2022-20224 Public exploit
In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Unscored —CVE-2022-20223 Public exploit
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call witho…
-
Unscored —CVE-2022-20142 Public exploit
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parc…