Vulnerabilities > Google > Android > 2.3.4

DATE CVE VULNERABILITY TITLE RISK
2017-03-08 CVE-2017-0504 Privilege Escalation vulnerability in Google Android MediaTek Components
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google
critical
9.3
2017-03-08 CVE-2017-0503 Privilege Escalation vulnerability in Google Android MediaTek Components
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google
critical
9.3
2017-03-08 CVE-2017-0502 Privilege Escalation vulnerability in Google Android MediaTek Components
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google
critical
9.3
2017-03-08 CVE-2017-0501 Privilege Escalation vulnerability in Google Android MediaTek Components
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google
critical
9.3
2017-03-08 CVE-2017-0500 Privilege Escalation vulnerability in Google Android MediaTek Components
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
google
critical
9.3
2017-03-07 CVE-2016-10200 Use After Free vulnerability in multiple products
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
local
high complexity
linux google CWE-416
7.0
2017-02-08 CVE-2017-0451 Information Exposure vulnerability in multiple products
An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels.
network
high complexity
google linux CWE-200
2.6
2017-02-08 CVE-2017-0450 Privilege Escalation vulnerability in Google Nexus Audioserver
An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process.
network
google
critical
9.3
2017-02-08 CVE-2017-0449 Privilege Escalation vulnerability in Google Nexus Broadcom Wi-Fi Driver
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
network
high complexity
google linux
7.6
2017-02-08 CVE-2017-0448 Information Exposure vulnerability in multiple products
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels.
network
google linux CWE-200
4.3