Page 74 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39791 | Medium | 5.5 | 2022-03-30 | In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2021-39790 | High | 7.8 | 2022-03-30 | In Dialer, there is a possible way to manipulate visual voicemail settings due to a missing permission check. This could lead to local escalation of privilege… |
CVE-2021-39789 | High | 7.8 | 2022-03-30 | In Telecom, there is a possible leak of TTY mode change due to a missing permission check. This could lead to local escalation of privilege with no additional… |
CVE-2021-39788 | Medium | 5.5 | 2022-03-30 | In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information dis… |
CVE-2021-39787 | High | 7.8 | 2022-03-30 | In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execut… |
CVE-2021-39786 | Medium | 6.7 | 2022-03-30 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-39784 | High | 7.8 | 2022-03-30 | In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation… |
CVE-2021-39783 | High | 7.8 | 2022-03-30 | In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additiona… |
CVE-2021-39782 | High | 7.8 | 2022-03-30 | In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of priv… |
CVE-2021-39781 | High | 7.8 | 2022-03-30 | In SmsController, there is a possible information disclosure due to a permissions bypass. This could lead to local escalation of privilege and sending sms with… |
CVE-2021-39780 | High | 7.8 | 2022-03-30 | In Traceur, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to loc… |
CVE-2021-39779 | Medium | 5.5 | 2022-03-30 | In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no… |
CVE-2021-39778 | Medium | 5.5 | 2022-03-30 | In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to… |
CVE-2021-39777 | Medium | 5.5 | 2022-03-30 | In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead t… |
CVE-2021-39776 | High | 7.8 | 2022-03-30 | In NFC, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed… |
CVE-2021-39775 | Medium | 5.5 | 2022-03-30 | In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2021-39774 | Medium | 5.5 | 2022-03-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution pri… |
CVE-2021-39773 | Medium | 5.5 | 2022-03-30 | In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information… |
CVE-2021-39772 | High | 8.8 | 2022-03-30 | In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privile… |
CVE-2021-39771 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to misrepresent which app wants to add a wifi network due to improper input validation. This could lead to local escalatio… |
CVE-2021-39770 | Medium | 5.5 | 2022-03-30 | In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure wit… |
CVE-2021-39769 | Medium | 5.5 | 2022-03-30 | In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could le… |
CVE-2021-39768 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local… |
CVE-2021-39767 | High | 7.8 | 2022-03-30 | In miniadb, there is a possible way to get read/write access to recovery system properties due to an insecure default value. This could lead to local escalatio… |
CVE-2021-39766 | Medium | 5.5 | 2022-03-30 | In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This coul… |
CVE-2021-39765 | Medium | 5.5 | 2022-03-30 | In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with User execution privileges need… |
CVE-2021-39764 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to display an incorrect app name due to improper input validation. This could lead to local escalation of privilege via ap… |
CVE-2021-39763 | High | 7.8 | 2022-03-30 | In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no ad… |
CVE-2021-39762 | High | 7.5 | 2022-03-30 | In tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution pr… |
CVE-2021-39761 | Medium | 5.5 | 2022-03-30 | In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could l… |
CVE-2021-39760 | Medium | 5.5 | 2022-03-30 | In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2021-39759 | High | 7.8 | 2022-03-30 | In libstagefright, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec… |
CVE-2021-39758 | High | 7.8 | 2022-03-30 | In WindowManager, there is a possible way to start a foreground activity from the background due to a missing permission check. This could lead to local escala… |
CVE-2021-39757 | Medium | 5.5 | 2022-03-30 | In PermissionController, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execut… |
CVE-2021-39756 | Medium | 5.5 | 2022-03-30 | In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This cou… |
CVE-2021-39755 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel informatio… |
CVE-2021-39754 | Medium | 5.5 | 2022-03-30 | In ContextImpl, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This c… |
CVE-2021-39753 | Medium | 5.5 | 2022-03-30 | In DomainVerificationService, there is a possible way to access app domain verification information due to a missing permission check. This could lead to local… |
CVE-2021-39752 | High | 7.8 | 2022-03-30 | In Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This could lead to local escalation of privilege with no additional… |
CVE-2021-39751 | Medium | 5.5 | 2022-03-30 | In Settings, there is a possible way to read Bluetooth device names without proper permissions due to a missing permission check. This could lead to local info… |
CVE-2021-39750 | High | 7.8 | 2022-03-30 | In PackageManager, there is a possible way to change the splash screen theme of other apps due to a missing permission check. This could lead to local escalati… |
CVE-2021-39749 | High | 7.8 | 2022-03-30 | In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission check. This could lead to local escalation… |
CVE-2021-39748 | Medium | 5.5 | 2022-03-30 | In InputMethodEditor, there is a possible way to access some files accessible to Settings due to an unsafe PendingIntent. This could lead to local information… |
CVE-2021-39747 | Medium | 5.5 | 2022-03-30 | In Settings Provider, there is a possible way to list values of non-readable global settings due to a permissions bypass. This could lead to local information… |
CVE-2021-39746 | High | 7.8 | 2022-03-30 | In PermissionController, there is a possible way to delete some local files due to an unsafe PendingIntent. This could lead to local escalation of privilege wi… |
CVE-2021-39745 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2021-39744 | Medium | 5.5 | 2022-03-30 | In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2021-39743 | High | 7.8 | 2022-03-30 | In PackageManager, there is a possible way to update the last usage time of another package due to a missing permission check. This could lead to local escalat… |
CVE-2021-39742 | Medium | 5.5 | 2022-03-30 | In Voicemail, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure wit… |
CVE-2021-39741 | High | 7.8 | 2022-03-30 | In Keymaster, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2021-39740 | Medium | 5.5 | 2022-03-30 | In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with… |
CVE-2021-39739 | Low | 3.3 | 2022-03-30 | In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with Sy… |
CVE-2021-1033 | High | 7.8 | 2022-03-30 | In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loca… |
CVE-2021-1000 | High | 7.8 | 2022-03-30 | In createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to l… |
CVE-2022-0343 | Low | 3.3 | 2022-03-29 | A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the… |
CVE-2021-22572 | Medium | 5.5 | 2022-03-29 | On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the… |
CVE-2021-46743 | Critical | 9.1 | 2022-03-29 | In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are lo… |
CVE-2021-22571 | Medium | 5.5 | 2022-03-18 | A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery… |
CVE-2021-39793 | High | 7.8 | 2022-03-16 | In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalati… |
CVE-2021-39792 | Medium | 4.1 | 2022-03-16 | In usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information d… |
CVE-2021-39737 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A |
CVE-2021-39736 | Medium | 6.7 | 2022-03-16 | In prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could… |
CVE-2021-39735 | Medium | 6.4 | 2022-03-16 | In gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of p… |
CVE-2021-39734 | High | 7.8 | 2022-03-16 | In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permission check. This cou… |
CVE-2021-39733 | Medium | 6.7 | 2022-03-16 | In amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of… |
CVE-2021-39732 | High | 7.8 | 2022-03-16 | In copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2021-39731 | Medium | 6.7 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lea… |
CVE-2021-39730 | Medium | 4.4 | 2022-03-16 | In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2021-39729 | Medium | 6.7 | 2022-03-16 | In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi… |
CVE-2021-39727 | Medium | 4.1 | 2022-03-16 | In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a race condition. Thi… |
CVE-2021-39726 | High | 7.5 | 2022-03-16 | In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no… |
CVE-2021-39725 | Medium | 6.7 | 2022-03-16 | In gasket_free_coherent_memory_all of gasket_page_table.c, there is a possible memory corruption due to a double free. This could lead to local escalation of p… |
CVE-2021-39724 | Medium | 4.4 | 2022-03-16 | In TuningProviderBase::GetTuningTreeSet of tuning_provider_base.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2021-39723 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A |
CVE-2021-39722 | Medium | 4.4 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead… |
CVE-2021-39721 | Medium | 6.7 | 2022-03-16 | In TBD of TBD, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privile… |
CVE-2021-39720 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A |
CVE-2021-39719 | Medium | 6.7 | 2022-03-16 | In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… |
CVE-2021-39718 | Medium | 6.7 | 2022-03-16 | In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lea… |
CVE-2021-39717 | Medium | 4.4 | 2022-03-16 | In iaxxx_btp_write_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosu… |
CVE-2021-39716 | High | 7.5 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A |
CVE-2021-39715 | Medium | 4.4 | 2022-03-16 | In __show_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. This could lead to local information di… |
CVE-2021-39714 | High | 7.8 | 2022-03-16 | In ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2021-39713 | High | 7.0 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel |
CVE-2021-39712 | Medium | 6.4 | 2022-03-16 | In TBD of TBD, there is a possible user after free vulnerability due to a race condition. This could lead to local escalation of privilege with System executio… |
CVE-2021-39711 | Medium | 4.4 | 2022-03-16 | In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure wit… |
CVE-2021-39710 | Critical | 9.8 | 2022-03-16 | Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A |
CVE-2021-39709 | High | 7.8 | 2022-03-16 | In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to loca… |
CVE-2021-39708 | Critical | 9.8 | 2022-03-16 | In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of p… |
CVE-2021-39707 | High | 7.8 | 2022-03-16 | In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to lo… |
CVE-2021-39706 | High | 7.8 | 2022-03-16 | In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. This could lead to… |
CVE-2021-39704 | High | 7.8 | 2022-03-16 | In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notification due to a perm… |
CVE-2021-39703 | High | 7.8 | 2022-03-16 | In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of priv… |
CVE-2021-39702 | High | 7.8 | 2022-03-16 | In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval due to a tapjacking/o… |
CVE-2021-39701 | High | 7.8 | 2022-03-16 | In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission d… |
CVE-2021-39698 | High | 7.8 | 2022-03-16 | In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no add… |
CVE-2021-39697 | High | 7.8 | 2022-03-16 | In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due to a missing permiss… |
CVE-2021-39695 | High | 7.8 | 2022-03-16 | In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2021-39694 | High | 7.8 | 2022-03-16 | In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions bypass. This could… |
CVE-2021-39693 | High | 7.8 | 2022-03-16 | In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in the code. This could… |