Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2023-09-04 CVE-2023-38460 Missing Authorization vulnerability in Google Android 11.0
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
local
low complexity
google CWE-862
7.8
2023-09-04 CVE-2023-38464 Missing Authorization vulnerability in Google Android 11.0
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
local
low complexity
google CWE-862
7.8
2023-08-14 CVE-2023-21229 Unspecified vulnerability in Google Android 11.0/13.0
In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21231 Unspecified vulnerability in Google Android 13.0
In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity due to a missing permission check.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21233 Use of Uninitialized Resource vulnerability in Google Android 11.0
In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data.
network
low complexity
google CWE-908
7.5
2023-08-14 CVE-2023-21235 Unspecified vulnerability in Google Android 11.0/13.0
In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21272 Improper Input Validation vulnerability in Google Android 11.0/12.0/12.1
In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation.
local
low complexity
google CWE-20
7.8
2023-08-14 CVE-2023-21273 Out-of-bounds Write vulnerability in Google Android
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check.
low complexity
google CWE-787
8.8
2023-08-14 CVE-2023-21275 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error in the code.
local
low complexity
google
7.8
2023-08-14 CVE-2023-21281 Unspecified vulnerability in Google Android
In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code.
local
low complexity
google
7.8