Vulnerabilities > Google > Android > High

DATE CVE VULNERABILITY TITLE RISK
2022-03-10 CVE-2022-24928 Unspecified vulnerability in Google Android 11.0
Security misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to be protected by RKP.
local
low complexity
google
7.8
2022-03-10 CVE-2022-24931 Unspecified vulnerability in Google Android 10.0/11.0
Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission
local
low complexity
google
7.8
2022-03-10 CVE-2022-20047 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
In video decoder, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2022-03-10 CVE-2022-20048 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
In video decoder, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
7.8
2022-03-10 CVE-2022-20053 Missing Authorization vulnerability in Google Android
In ims service, there is a possible escalation of privilege due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-03-10 CVE-2022-20054 Missing Authorization vulnerability in Google Android
In ims service, there is a possible AT command injection due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-03-04 CVE-2022-23729 Improper Authentication vulnerability in Google Android
When the device is in factory state, it can be access the shell without adb authentication process.
local
low complexity
google CWE-287
7.8
2022-02-11 CVE-2021-39619 Unspecified vulnerability in Google Android 11.0/12.0
In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause.
local
low complexity
google
7.8
2022-02-11 CVE-2021-39662 Missing Authorization vulnerability in Google Android 11.0/12.0
In checkUriPermission of MediaProvider.java , there is a possible way to gain access to the content of media provider collections due to a missing permission check.
local
low complexity
google CWE-862
7.8
2022-02-11 CVE-2021-39663 Externally Controlled Reference to a Resource in Another Sphere vulnerability in Google Android 10.0
In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy.
local
low complexity
google CWE-610
7.8