Platform
Android
6,319 known vulnerabilities.
6,319 results · Feed
-
Unscored —
In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. Thi…
-
Unscored —CVE-2022-20186 Public exploit
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input valida…
-
Unscored —
In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content prov…
-
Unscored —
In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded application…
-
Medium 5.9
Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users cli…
-
Medium 5.9
Improperly constrained session cookies in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-sc…
-
High 8.1
Improper XML Parsing in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message c…
-
Medium 6.3
An SSL certificate host verification vulnerability affects HCL Verse for Android
Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted using a pro…
-
Unscored —
In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This c…
-
Unscored —CVE-2022-20120 Public exploit
Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A
-
Unscored —
In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. Thi…
-
Unscored —
In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lea…
-
Unscored —
In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. Th…
-
Unscored —
In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check. This c…
-
Unscored —
In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirecti…
-
Unscored —
In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information wi…
-
Unscored —
In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground …
-
Unscored —
In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mod…
-
Unscored —
In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change pri…
-
Unscored —
In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to m…
-
Unscored —
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This …
-
Unscored —CVE-2022-20009 Public exploit
In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check…
-
Unscored —
In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This c…
-
Unscored —CVE-2022-20007 Public exploit
In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app t…
-
Unscored —
In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's …
-
Unscored —CVE-2022-20005 Public exploit
In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code an…
-
Unscored —CVE-2022-20004 Public exploit
In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input valid…
-
Unscored —
In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results…
-
Unscored —CVE-2021-39670 Public exploit
In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validatio…
-
Medium 5.5
On F5 Access for Android 3.x versions prior to 3.0.8, a Task Hijacking vulnerability exists in the F5 Access for Androi…
-
Low 3.9
An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys fro…
-
Medium 6.8
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify…
-
High 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
-
Unscored —
In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check. This could …
-
Unscored —
In TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to local escalation of p…
-
Unscored —
In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Unscored —
In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground…
-
Unscored —
In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to …
-
Unscored —
In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This could lead to remote pers…
-
Unscored —
In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This cou…