Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information …
-
Unscored —
In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to share…
-
Unscored —
In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of …
-
Unscored —
In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could le…
-
Unscored —
NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value…
-
Unscored —
In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer over…
-
Unscored —
In ihevcd_ref_list of ihevcd_ref_list.c in Android 10, there is a possible out of bounds write due to a missing bounds …
-
Unscored —
In readArgumentList of zygote.java in Android 10, there is a possible command injection due to improper input validatio…
-
Unscored —
In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is …
-
Unscored —
In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possible out of bounds read due to improper input vali…
-
Unscored —
In NDEF_MsgValidate of ndef_utils in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds read due t…
-
Unscored —
In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible out of bounds write due t…
-
Unscored —
In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corrup…
-
Unscored —
In isPreferred of HidProfile.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible device type confusion du…
-
Unscored —
In ihevcd_parse_buffering_period_sei of ihevcd_parse_headers.c in Android 8.0, 8.1 and 9, there is a possible out of bo…
-
Unscored —
In Google Assistant in Android 9, there is a possible permissions bypass that allows the Assistant to take a screenshot…
-
Unscored —
In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect …
-
Unscored —
In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible …
-
Unscored —
In execTransact of Binder.java in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible local execution of arbitra…
-
Critical 10.0
SmartHome application has a broken access control vulnerability in its Web API Server
A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway (HG100) via …
-
Unscored —
In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use …
-
Unscored —
In the endCall() function of TelecomManager.java, there is a possible Denial of Service due to a missing permission che…
-
Unscored —
In Status::readFromParcel of Status.cpp, there is a possible out of bounds read due to improper input validation. This …
-
Unscored —
In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In phFriNfc_ExtnsTransceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer over…
-
Unscored —
In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a heap buffer overflow. T…
-
Unscored —
It is possible to overlay the VPN dialog by a malicious application. This could lead to local escalation of privilege w…
-
Unscored —
An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation …
-
Unscored —
In CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to type confusion. This co…
-
Unscored —
In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bound…
-
Unscored —
In ACELP_4t64_fx of c4t64fx.c, there is a possible out of bounds write due to a missing bounds check. This could lead t…
-
Unscored —
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer…
-
Unscored —
In ChangeDefaultDialerDialog.java, there is a possible escalation of privilege due to an overlay attack. This could lea…
-
Unscored —
In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of th…
-
Unscored —
In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could l…
-
Unscored —
In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc, there is a possible file corruption issue due to an inse…
-
Critical 9.8CVE-2019-1182 EPSS 17%
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentica…
-
Critical 9.8CVE-2019-1181 EPSS 78%
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentica…
-
Unscored —
Outlook for Android Spoofing Vulnerability
A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker who …
-
Unscored —
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-…