| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-1658 | Hig | 0.57 | 8.8 | 0.03 | Jan 12, 2021 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2021-1657 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows Fax Compose Form Remote Code Execution Vulnerability | ||
| CVE-2021-1655 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows CSC Service Elevation of Privilege Vulnerability | ||
| CVE-2021-1654 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows CSC Service Elevation of Privilege Vulnerability | ||
| CVE-2021-1653 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows CSC Service Elevation of Privilege Vulnerability | ||
| CVE-2021-1652 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows CSC Service Elevation of Privilege Vulnerability | ||
| CVE-2021-1651 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | ||
| CVE-2021-1650 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows Runtime C++ Template Library Elevation of Privilege Vulnerability | ||
| CVE-2021-1649 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Active Template Library Elevation of Privilege Vulnerability | ||
| CVE-2021-1648 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Microsoft splwow64 Elevation of Privilege Vulnerability | ||
| CVE-2021-1647 | Hig | 0.66 | 7.8 | 0.40 | KEV | Jan 12, 2021 | Microsoft Defender Remote Code Execution Vulnerability | |
| CVE-2021-1644 | Hig | 0.51 | 7.8 | 0.04 | Jan 12, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-1643 | Hig | 0.51 | 7.8 | 0.04 | Jan 12, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-1642 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | ||
| CVE-2021-1638 | Hig | 0.50 | 7.7 | 0.01 | Jan 12, 2021 | Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that… | ||
| CVE-2021-1636 | Hig | 0.58 | 8.8 | 0.07 | Jan 12, 2021 | Microsoft SQL Elevation of Privilege Vulnerability | ||
| CVE-2020-4079 | Hig | 0.43 | 7.7 | 0.01 | Jan 12, 2021 | Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint for the "excel export" portal functionality is called directly it allows getting data without scope filtering. This allows a user to access data they which… | ||
| CVE-2020-27148 | Hig | 0.46 | 7.1 | 0.01 | Jan 12, 2021 | The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low privileged attacker with network access to execute an XML… | ||
| CVE-2021-21469 | Hig | 0.49 | 7.5 | 0.01 | Jan 12, 2021 | When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any… | ||
| CVE-2021-21466 | Hig | 0.57 | 8.8 | 0.03 | Jan 12, 2021 | SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious… | ||
| CVE-2021-21463 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21462 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21461 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21460 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21459 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21458 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21457 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21456 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21455 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21454 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21453 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21452 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21451 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21450 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21449 | Hig | 0.57 | 8.8 | 0.01 | Jan 12, 2021 | SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper… | ||
| CVE-2021-21446 | Hig | 0.49 | 7.5 | 0.01 | Jan 12, 2021 | SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service. | ||
| CVE-2020-35459 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges. | ||
| CVE-2020-14274 | Hig | 0.49 | 7.5 | 0.01 | Jan 12, 2021 | Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors. | ||
| CVE-2021-23240 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines… | ||
| CVE-2020-35654 | Hig | 0.50 | 8.8 | 0.02 | Jan 12, 2021 | In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. | ||
| CVE-2020-35653 | Hig | 0.39 | 7.1 | 0.02 | Jan 12, 2021 | In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations. | ||
| CVE-2020-26050 | Hig | 0.51 | 7.8 | 0.01 | Jan 12, 2021 | SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572. | ||
| CVE-2020-16146 | Hig | 0.49 | 7.5 | 0.01 | Jan 12, 2021 | Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in btc_blufi_recv_handler function in blufi_prf.c. An attacker can send a crafted BluFi protocol Write… | ||
| CVE-2021-0319 | Hig | 0.47 | 7.3 | 0.00 | Jan 11, 2021 | In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC… | ||
| CVE-2021-0318 | Hig | 0.51 | 7.8 | 0.00 | Jan 11, 2021 | In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product:… | ||
| CVE-2021-0317 | Hig | 0.51 | 7.8 | 0.00 | Jan 11, 2021 | In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android;… | ||
| CVE-2021-0315 | Hig | 0.47 | 7.3 | 0.00 | Jan 11, 2021 | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction… | ||
| CVE-2021-0313 | Hig | 0.49 | 7.5 | 0.02 | Jan 11, 2021 | In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product:… | ||
| CVE-2021-0310 | Hig | 0.51 | 7.8 | 0.00 | Jan 11, 2021 | In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android;… | ||
| CVE-2021-0307 | Hig | 0.51 | 7.8 | 0.00 | Jan 11, 2021 | In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no… |
- risk 0.57cvss 8.8epss 0.03
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Fax Compose Form Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows CSC Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows CSC Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows CSC Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows CSC Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Active Template Library Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft splwow64 Elevation of Privilege Vulnerability
- risk 0.66cvss 7.8epss 0.40
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
- risk 0.50cvss 7.7epss 0.01
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that…
- risk 0.58cvss 8.8epss 0.07
Microsoft SQL Elevation of Privilege Vulnerability
- risk 0.43cvss 7.7epss 0.01
Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint for the "excel export" portal functionality is called directly it allows getting data without scope filtering. This allows a user to access data they which…
- risk 0.46cvss 7.1epss 0.01
The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low privileged attacker with network access to execute an XML…
- risk 0.49cvss 7.5epss 0.01
When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any…
- risk 0.57cvss 8.8epss 0.03
SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.57cvss 8.8epss 0.01
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper…
- risk 0.49cvss 7.5epss 0.01
SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service.
- risk 0.51cvss 7.8epss 0.01
An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
- risk 0.49cvss 7.5epss 0.01
Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors.
- risk 0.51cvss 7.8epss 0.01
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines…
- risk 0.50cvss 8.8epss 0.02
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
- risk 0.39cvss 7.1epss 0.02
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
- risk 0.51cvss 7.8epss 0.01
SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572.
- risk 0.49cvss 7.5epss 0.01
Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in btc_blufi_recv_handler function in blufi_prf.c. An attacker can send a crafted BluFi protocol Write…
- risk 0.47cvss 7.3epss 0.00
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC…
- risk 0.51cvss 7.8epss 0.00
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…
- risk 0.51cvss 7.8epss 0.00
In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android;…
- risk 0.47cvss 7.3epss 0.00
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction…
- risk 0.49cvss 7.5epss 0.02
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product:…
- risk 0.51cvss 7.8epss 0.00
In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android;…
- risk 0.51cvss 7.8epss 0.00
In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no…