Vulnerabilities > Google > Android

DATE CVE VULNERABILITY TITLE RISK
2024-05-07 CVE-2024-0022 Unspecified vulnerability in Google Android 13.0/14.0
In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another user profile due to improper input validation.
local
low complexity
google
5.5
2024-05-07 CVE-2024-0024 Unspecified vulnerability in Google Android
In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation.
local
low complexity
google
7.8
2024-05-07 CVE-2024-0025 Unspecified vulnerability in Google Android
In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error.
local
low complexity
google
7.8
2024-05-07 CVE-2024-0026 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion.
local
low complexity
google CWE-770
5.5
2024-05-07 CVE-2024-0027 Allocation of Resources Without Limits or Throttling vulnerability in Google Android
In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion.
local
low complexity
google CWE-770
5.5
2024-05-07 CVE-2024-0042 Improper Certificate Validation vulnerability in Google Android
In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto.
local
low complexity
google CWE-295
7.8
2024-05-07 CVE-2024-0043 Unspecified vulnerability in Google Android
In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code.
local
low complexity
google
7.8
2024-05-07 CVE-2024-23704 Missing Authorization vulnerability in Google Android 13.0/14.0
In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check.
local
low complexity
google CWE-862
7.8
2024-05-07 CVE-2024-23705 Unspecified vulnerability in Google Android
In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation.
local
low complexity
google
7.8
2024-05-07 CVE-2024-23706 Unspecified vulnerability in Google Android 14.0
In multiple locations, there is a possible bypass of health data permissions due to an improper input validation.
local
low complexity
google
7.8