Filtered by vendor Google
Subscriptions
Filtered by product Android
Subscriptions
Total
7929 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-39900 | 1 Google | 1 Android | 2024-08-03 | 4.6 Medium |
Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the application installed in Secure Folder through Nice Catch. | ||||
CVE-2022-39913 | 1 Google | 1 Android | 2024-08-03 | 6.8 Medium |
Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attacker to access user profiles information. | ||||
CVE-2022-39912 | 1 Google | 1 Android | 2024-08-03 | 6.2 Medium |
Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder. | ||||
CVE-2022-39877 | 2 Google, Samsung | 2 Android, Group Sharing | 2024-08-03 | 4 Medium |
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device. | ||||
CVE-2022-39853 | 2 Google, Qualcomm | 3 Android, Sm8150, Sm8250 | 2024-08-03 | 4.4 Medium |
A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. | ||||
CVE-2022-39915 | 2 Google, Samsung | 2 Android, Calendar | 2024-08-03 | 3.3 Low |
Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent. | ||||
CVE-2022-39896 | 1 Google | 1 Android | 2024-08-03 | 4 Medium |
Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent. | ||||
CVE-2022-39879 | 1 Google | 1 Android | 2024-08-03 | 5.9 Medium |
Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessing information with phone uid. | ||||
CVE-2022-39885 | 1 Google | 1 Android | 2024-08-03 | 5.9 Medium |
Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information. | ||||
CVE-2022-39904 | 1 Google | 1 Android | 2024-08-03 | 3.3 Low |
Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identifier via log. | ||||
CVE-2022-39882 | 1 Google | 1 Android | 2024-08-03 | 8 High |
Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker to execute arbitrary code. | ||||
CVE-2022-39908 | 1 Google | 1 Android | 2024-08-03 | 6.9 Medium |
TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write. | ||||
CVE-2022-39887 | 1 Google | 1 Android | 2024-08-03 | 4.3 Medium |
Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting. | ||||
CVE-2022-39894 | 1 Google | 1 Android | 2024-08-03 | 4 Medium |
Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent. | ||||
CVE-2022-39851 | 1 Google | 1 Android | 2024-08-03 | 4 Medium |
Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS permission. | ||||
CVE-2022-39898 | 1 Google | 1 Android | 2024-08-03 | 4 Medium |
Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some information of usim. | ||||
CVE-2022-39852 | 1 Google | 1 Android | 2024-08-03 | 8 High |
A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execution. | ||||
CVE-2022-39884 | 1 Google | 1 Android | 2024-08-03 | 4.3 Medium |
Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information. | ||||
CVE-2022-39883 | 1 Google | 1 Android | 2024-08-03 | 4 Medium |
Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API. | ||||
CVE-2022-39903 | 1 Google | 1 Android | 2024-08-03 | 4 Medium |
Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number. |