‼ CVE-2022-20126 ‼
📖 Read
via "National Vulnerability Database".
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-203431023📖 Read
via "National Vulnerability Database".
🗓️ Dark web awash with breached credentials, study finds 🗓️
📖 Read
via "The Daily Swig".
Many consumers still relying on easy-to-crack passwords, warns Digital Shadows📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Dark web awash with breached credentials, study finds
Many consumers still relying on easy-to-crack passwords, warns Digital Shadows
‼ CVE-2022-20181 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33036 ‼
📖 Read
via "National Vulnerability Database".
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20156 ‼
📖 Read
via "National Vulnerability Database".
In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-212803946References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20170 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20176 ‼
📖 Read
via "National Vulnerability Database".
In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197787879References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20160 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20177 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20175 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20146 ‼
📖 Read
via "National Vulnerability Database".
In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. This could lead to local information disclosure of private files with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-211757677References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20141 ‼
📖 Read
via "National Vulnerability Database".
In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20149 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20162 ‼
📖 Read
via "National Vulnerability Database".
In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223492713References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20172 ‼
📖 Read
via "National Vulnerability Database".
In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-206987222References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20166 ‼
📖 Read
via "National Vulnerability Database".
In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20164 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20140 ‼
📖 Read
via "National Vulnerability Database".
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-227618988📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20174 ‼
📖 Read
via "National Vulnerability Database".
In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210847407References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20179 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20147 ‼
📖 Read
via "National Vulnerability Database".
In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-221216105📖 Read
via "National Vulnerability Database".