Vulnerability index

Browse CVEs

680 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Android HIGH 7.8
CVE-2023-21341

In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local escalation …

Fix: 14.0+
Fix from $1,950 2023-10-30
Android MEDIUM 5.5
CVE-2023-21329

In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local inf…

Fix: 14.0+
Fix from $1,600 2023-10-30
Android MEDIUM 5.5
CVE-2023-21340

In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local information disclosure with no…

Fix: 14.0+
Fix from $1,600 2023-10-30
Android HIGH 7.8
CVE-2023-21313

In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of pr…

Fix: 14.0+
Fix from $1,950 2023-10-30
Android MEDIUM 5.5
CVE-2023-21321

In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could lead to local information disclo…

Fix: 14.0+
Fix from $1,600 2023-10-30
Android HIGH 7.8
CVE-2021-39810

In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user …

Mitigation only
Fix from $1,950 2023-10-30
Android MEDIUM 5.5
CVE-2023-21294

In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure wit…

Fix: 14.0+
Fix from $1,600 2023-10-30
Android MEDIUM 6.7
CVE-2023-40653

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 6.7
CVE-2023-40654

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40641

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40642

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

No fix yet
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40643

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40644

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40645

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40646

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40647

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40648

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

No fix yet
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40649

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges n…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40650

In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privil…

Mitigation only
Fix from $1,600 2023-10-08
Android HIGH 7.8
CVE-2023-40634

In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution priv…

Mitigation only
Fix from $1,950 2023-10-08
Android HIGH 7.8
CVE-2023-40635

In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges …

Mitigation only
Fix from $1,950 2023-10-08
Android MEDIUM 5.5
CVE-2023-40633

In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privi…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40637

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privil…

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40639

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution …

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 5.5
CVE-2023-40640

In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution …

Mitigation only
Fix from $1,600 2023-10-08
Android MEDIUM 6.7
CVE-2023-21244

In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local …

Patch available
Fix from $1,600 2023-10-06
Android MEDIUM 5.5
CVE-2023-21291

In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could l…

Patch available
Fix from $1,600 2023-10-06
Android MEDIUM 5.5
CVE-2023-35677

In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to loca…

Mitigation only
Fix from $1,600 2023-09-11
Android HIGH 7.8
CVE-2023-35665

In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalati…

Patch available
Fix from $1,950 2023-09-11
Android MEDIUM 5.5
CVE-2023-20825

In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no a…

Mitigation only
Fix from $1,600 2023-09-04