Linux Tizen
13 CVEs affecting Linux Tizen. Latest disclosed: 2021-07-08. Critical: 4, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25437 | Critical | 9.8 | 2021-07-08 | Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing… |
CVE-2021-25436 | Critical | 9.8 | 2021-07-08 | Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory P… |
CVE-2021-25435 | Critical | 9.8 | 2021-07-08 | Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition… |
CVE-2021-25434 | Critical | 9.8 | 2021-07-08 | Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in… |
CVE-2018-16263 | High | 8.8 | 2020-01-22 | The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations… |
CVE-2018-16262 | High | 8.8 | 2020-01-22 | The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations… |
CVE-2018-16267 | High | 8.1 | 2020-01-22 | The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configur… |
CVE-2018-16266 | High | 8.1 | 2020-01-22 | The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurati… |
CVE-2018-16265 | Medium | 6.5 | 2020-01-22 | The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to impro… |
CVE-2018-16264 | Medium | 6.5 | 2020-01-22 | The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus securit… |
CVE-2021-25433 | Medium | 5.5 | 2021-07-08 | Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory r… |
CVE-2018-16268 | Medium | 4.3 | 2020-01-22 | The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security poli… |
CVE-2012-6459 | | 2013-01-01 | ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive inform… |