Platform
Android
6,319 known vulnerabilities.
868 results · Clear filters · Feed
-
Medium 6.8
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify…
-
Medium 5.3
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version…
-
Medium 4.3
F-Secure SAFE Browser vulnerable to USSD attacks
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD mess…
-
Medium 5.9
Microsoft Defender for Endpoint Spoofing Vulnerability
Microsoft Defender for Endpoint Spoofing Vulnerability
-
Medium 5.5
Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for Android
A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A s…
-
Medium 5.5
Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android
A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the …
-
Medium 4.7
Zoom Chat Susceptible to Zip Bombing
The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before versio…
-
Medium 5.5
Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated use…
-
Medium 5.5
Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to po…
-
Medium 5.9
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
-
Medium 4.3
Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
-
Medium 6.4CVE-2021-0920 Exploited
In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…
KEV May 23, 2022 -
Medium 4.7
Server Side Request Forgery in Zoom Client for Meetings chat
The Zoom Client for Meetings before version 5.7.3 (for Android, iOS, Linux, macOS, and Windows) contain a server side request forgery vulnerability in the chat\'s "link preview" functionality. In versions prior to 5.7.3, if a user were to enable the chat\'s "…
-
Medium 5.8
Intent URI permissions manipulation in nextcloud news-android
nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that…
-
Medium 5.3
Process memory exposure in Zoom Client and other products
A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for And…
-
Medium 5.9CVE-2021-36808 Public exploit
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before ver…
-
Medium 6.3
Microsoft Accessibility Insights for Android Information Disclosure Vulnerability
Microsoft Accessibility Insights for Android Information Disclosure Vulnerability
-
Medium 4.6
Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
-
Medium 5.5
In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifier…
-
Medium 5.5
In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permi…
-
Medium 5.5
In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This c…
-
Medium 4.7
Microsoft Bing Search Spoofing Vulnerability
Microsoft Bing Search Spoofing Vulnerability
-
Medium 5.0
Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
-
Medium 4.3
Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
-
Medium 4.2
Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows ma…
-
Medium 5.0
Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability
A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An at…
-
Medium 4.6
Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability
A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied inpu…
-
Medium 5.3
An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android …