Page 67 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20320 | Low | 3.3 | 2022-08-12 | In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2022-20319 | High | 7.8 | 2022-08-12 | In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege w… |
CVE-2022-20318 | Low | 3.3 | 2022-08-12 | In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2022-20317 | Medium | 5.5 | 2022-08-12 | In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This could lead to local information disclos… |
CVE-2022-20316 | Low | 3.3 | 2022-08-12 | In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2022-20315 | Low | 3.3 | 2022-08-12 | In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure wit… |
CVE-2022-20314 | Medium | 6.7 | 2022-08-12 | In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation of privilege wit… |
CVE-2022-20313 | Medium | 6.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-20312 | Medium | 5.5 | 2022-08-12 | In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information… |
CVE-2022-20311 | Low | 3.3 | 2022-08-12 | In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information d… |
CVE-2022-20310 | Low | 3.3 | 2022-08-12 | In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. This could lead to local information d… |
CVE-2022-20309 | Low | 3.3 | 2022-08-12 | In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2022-20308 | High | 7.5 | 2022-08-12 | In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with n… |
CVE-2022-20307 | Low | 3.3 | 2022-08-12 | In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20306 | Medium | 6.7 | 2022-08-12 | In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20305 | Low | 3.3 | 2022-08-12 | In ContentService, there is a possible disclosure of available account types due to a missing permission check. This could lead to local information disclosure… |
CVE-2022-20304 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This could lead to local information disclosu… |
CVE-2022-20303 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This… |
CVE-2022-20302 | High | 7.6 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to local escalation of privilege if the attac… |
CVE-2022-20301 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclos… |
CVE-2022-20300 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20299 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local infor… |
CVE-2022-20298 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20297 | High | 7.8 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2022-20296 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20295 | Medium | 5.5 | 2022-08-12 | In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information… |
CVE-2022-20294 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to learn about an account present on the device due to a missing permission check. This could lead to local information dis… |
CVE-2022-20293 | Medium | 5.5 | 2022-08-12 | In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2022-20292 | High | 7.8 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2022-20291 | Medium | 5.5 | 2022-08-12 | In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2022-20290 | Medium | 5.5 | 2022-08-12 | In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to local escalation of privilege with no addi… |
CVE-2022-20289 | Medium | 5.5 | 2022-08-12 | In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2022-20288 | Medium | 5.5 | 2022-08-12 | In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2022-20287 | Medium | 5.5 | 2022-08-12 | In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2022-20286 | High | 7.8 | 2022-08-12 | In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. This could lead to local esc… |
CVE-2022-20285 | Medium | 5.5 | 2022-08-12 | In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2022-20284 | Medium | 5.5 | 2022-08-12 | In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of phone accounts w… |
CVE-2022-20283 | High | 8.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional ex… |
CVE-2022-20282 | High | 7.8 | 2022-08-12 | In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privil… |
CVE-2022-20281 | High | 7.8 | 2022-08-12 | In Core, there is a possible way to start an activity from the background due to a missing permission check. This could lead to local escalation of privilege w… |
CVE-2022-20280 | Low | 3.3 | 2022-08-12 | In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lead to local information disclosure of sm… |
CVE-2022-20279 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20278 | Medium | 5.5 | 2022-08-12 | In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. This could lead to local information d… |
CVE-2022-20277 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20276 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20275 | Medium | 5.5 | 2022-08-12 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2022-20274 | High | 7.8 | 2022-08-12 | In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of screen timeout with User execution privile… |
CVE-2022-20273 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional executi… |
CVE-2022-20272 | Medium | 5.5 | 2022-08-12 | In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to loc… |
CVE-2022-20271 | High | 7.8 | 2022-08-12 | In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI. This could lead to local… |
CVE-2022-20270 | Medium | 5.5 | 2022-08-12 | In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could lead to local information disclosure with… |
CVE-2022-20269 | Medium | 6.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-20268 | High | 7.8 | 2022-08-12 | In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. This could lead to lo… |
CVE-2022-20267 | Low | 3.3 | 2022-08-12 | In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. This could lead to loca… |
CVE-2022-20266 | Medium | 5.0 | 2022-08-12 | In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification due to improper input… |
CVE-2022-20265 | Medium | 4.6 | 2022-08-12 | In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. This could lead to local escalation of privilege with phy… |
CVE-2022-20263 | Medium | 5.5 | 2022-08-12 | In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could lead to local information disclosure of… |
CVE-2022-20262 | Low | 3.3 | 2022-08-12 | In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. This could lead to local information dis… |
CVE-2022-20261 | Low | 2.3 | 2022-08-12 | In LocationManager, there is a possible way to get location information due to a missing permission check. This could lead to local information disclosure with… |
CVE-2022-20260 | Medium | 5.5 | 2022-08-12 | In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with User e… |
CVE-2022-20259 | Medium | 5.5 | 2022-08-12 | In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local information disclosure with no additional e… |
CVE-2022-20258 | High | 7.8 | 2022-08-12 | In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could lead to local escalation of privilege wit… |
CVE-2022-20257 | Low | 3.3 | 2022-08-12 | In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. This could lead to local escalat… |
CVE-2022-20256 | Medium | 6.4 | 2022-08-12 | In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-20255 | Medium | 4.4 | 2022-08-12 | In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. This could lead to local escalation of p… |
CVE-2022-20254 | High | 8.8 | 2022-08-12 | In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. U… |
CVE-2022-20253 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional exe… |
CVE-2022-2390 | Medium | 6.1 | 2022-08-12 | Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google… |
CVE-2022-20408 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A |
CVE-2022-20407 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A |
CVE-2022-20406 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A |
CVE-2022-20405 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A |
CVE-2022-20404 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A |
CVE-2022-20403 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A |
CVE-2022-20402 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A |
CVE-2022-20401 | High | 7.5 | 2022-08-11 | In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… |
CVE-2022-20400 | Critical | 9.8 | 2022-08-11 | In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional… |
CVE-2022-20384 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A |
CVE-2022-20383 | High | 7.8 | 2022-08-11 | In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation… |
CVE-2022-20382 | Medium | 6.7 | 2022-08-11 | In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution… |
CVE-2022-20381 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A |
CVE-2022-20380 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A |
CVE-2022-20379 | Medium | 6.7 | 2022-08-11 | In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege w… |
CVE-2022-20378 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A |
CVE-2022-20377 | Medium | 6.7 | 2022-08-11 | In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of… |
CVE-2022-20376 | Medium | 6.7 | 2022-08-11 | In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with Syst… |
CVE-2022-20375 | High | 7.5 | 2022-08-11 | In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service… |
CVE-2022-20373 | Medium | 6.4 | 2022-08-11 | In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w… |
CVE-2022-20372 | Medium | 6.7 | 2022-08-11 | In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System exec… |
CVE-2022-20371 | Medium | 6.4 | 2022-08-11 | In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege w… |
CVE-2022-20370 | High | 7.5 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A |
CVE-2022-20369 | Medium | 6.7 | 2022-08-11 | In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privil… |
CVE-2022-20368 | High | 7.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel |
CVE-2022-20367 | Medium | 6.7 | 2022-08-11 | In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2022-20366 | Medium | 6.7 | 2022-08-11 | In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege w… |
CVE-2022-20365 | Critical | 9.8 | 2022-08-11 | Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A |
CVE-2022-20252 | Low | 3.3 | 2022-08-11 | In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2022-20251 | Low | 3.3 | 2022-08-11 | In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2022-20250 | High | 7.8 | 2022-08-11 | In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. This could lead to local esca… |
CVE-2022-20249 | Low | 3.3 | 2022-08-11 | In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |