Skip to content
OpenAdvisories

Platform

Android

6,319 known vulnerabilities.

1,170 results · Clear filters · Feed

  • High 7.8

    In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions byp…

  • High 7.5

    In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic err…

  • High 7.1

    In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loc…

  • High 7.8

    In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This…

  • High 7.8

    In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This co…

  • High 7.8

    In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exceptio…

  • High 7.8

    In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_C…

  • High 7.8
    CVE-2023-20955 Public exploit

    In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and unin…

  • High 7.8

    In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to …

  • High 7.8

    In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to in…

  • High 7.8

    In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the…

  • High 7.8

    In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities…

  • High 7.8

    In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission afte…

  • High 7.3

    In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default …

  • High 7.8

    In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions check…

  • High 7.8

    In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions witho…

  • High 7.8

    In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loca…

  • High 7.8

    In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confus…

  • High 7.8

    In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. Th…

  • High 7.8
    CVE-2023-20963 Exploited Public exploit

    In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional…

    KEV Apr 13, 2023
  • High 7.8
    CVE-2023-20911 Public exploit

    In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due …

  • High 7.8

    In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead…

  • High 7.8

    Windows Graphics Component Elevation of Privilege Vulnerability

    Windows Graphics Component Elevation of Privilege Vulnerability

  • High 7.8

    In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing b…

  • High 7.8
    CVE-2023-20943 Public exploit

    In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a pat…

  • High 7.8

    In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. Thi…

  • High 7.8

    In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper lockin…

  • High 7.8

    In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicato…

  • High 8.1
    CVE-2023-20938 Public exploit

    In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. …

  • High 7.8

    In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. Th…

  • High 7.5

    In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. Th…

  • High 7.8
    CVE-2023-20933 Public exploit

    In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could l…

  • High 7.8
    CVE-2023-20944 Public exploit

    In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization.…

  • High 7.5

    A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An a…

  • High 7.8

    In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypa…

  • High 7.8
    CVE-2023-21823 Exploited Public exploit

    Windows Graphics Component Remote Code Execution Vulnerability

    Windows Graphics Component Remote Code Execution Vulnerability

    KEV Feb 14, 2023
  • High 8.3

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  • High 7.5

    SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a cred…

  • High 7.5

    Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to …

  • High 7.8

    In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error …