Google Android

• CVE-2023-40074 Unrated In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. 0.1%
• CVE-2023-40073 Unrated In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no additional execution privileges needed. Use 0.1%
• CVE-2023-35690 Unrated In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execut 0.4%
• CVE-2023-35668 Unrated In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution pr 0.1%
• CVE-2023-21403 Unrated In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execu 0.4%
• CVE-2023-21402 Unrated In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution 0.4%
• CVE-2023-21401 Unrated In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional ex 0.4%
• CVE-2023-21263 Unrated In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution pr 0.4%
• CVE-2023-21228 Unrated In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no ad 0.4%
• CVE-2023-21227 Unrated In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in the kernel with no additional execution pri 0.3%
• CVE-2023-21218 Unrated In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no ad 0.4%
• CVE-2023-21217 Unrated In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User 0.4%
• CVE-2023-21216 Critical 9.8 In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additi 0.4%
• CVE-2023-21215 Unrated In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additio 0.4%
• CVE-2023-21166 Critical 9.8 In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution pr 0.4%
• CVE-2023-21164 Unrated In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execut 0.4%
• CVE-2023-21163 Unrated In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges 0.4%
• CVE-2023-21162 Unrated In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution 0.4%
• CVE-2022-42541 Critical 9.8 Remote code execution 0.6%
• CVE-2022-42540 Unrated Elevation of privilege 0.4%
• CVE-2022-42539 Unrated Information disclosure 0.3%
• CVE-2022-42538 Unrated Elevation of privilege 0.4%
• CVE-2022-42537 Unrated Remote code execution 0.6%
• CVE-2022-42536 Unrated Remote code execution 0.6%
• CVE-2023-45780 High 7.3 In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User 0.1%
• CVE-2023-40101 Unrated In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. 0.1%
• CVE-2023-21398 Unrated In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. Us 0.1%
• CVE-2023-21397 Unrated In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User 0.1%
• CVE-2023-21396 Unrated In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User inter 0.1%
• CVE-2023-21395 Unrated In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User inter 0.2%
• CVE-2023-21394 Unrated In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission check. This could lead to local information disclosure with n 0.1%
• CVE-2023-21393 Unrated In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User 0.1%
• CVE-2023-21392 Unrated In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetooth device with no additional execution pri 0.2%
• CVE-2023-21391 Unrated In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. 0.5%
• CVE-2023-21390 High 7.8 In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. Use 0.1%
• CVE-2023-21389 Unrated In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed 0.1%
• CVE-2023-21388 Unrated In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction 0.1%
• CVE-2023-21387 Unrated In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to local information disclosure with System ex 0.1%
• CVE-2023-21385 Unrated In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not <0.1%
• CVE-2023-21384 Unrated In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interact <0.1%
• CVE-2023-21383 Unrated In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This could lead to local information disclosure with no additional execution privileges n 0.1%
• CVE-2023-21382 Unrated In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could lead to local information disclosure wit <0.1%
• CVE-2023-21381 Unrated In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. Us <0.1%
• CVE-2023-21380 Unrated In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n 0.1%
• CVE-2023-21379 Unrated In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server with System execution privileges needed. Use <0.1%
• CVE-2023-21378 Unrated In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check. This could lead to local escalation of privilege with no additional execution p <0.1%
• CVE-2023-21377 Unrated In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction <0.1%
• CVE-2023-21376 Medium 5.5 In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User inter <0.1%
• CVE-2023-21375 Unrated In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n 0.1%
• CVE-2023-21374 Unrated In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. Use <0.1%