Vulnerabilities > Google > Android > Low

DATE CVE VULNERABILITY TITLE RISK
2020-11-10 CVE-2020-0437 Missing Authorization vulnerability in Google Android
In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check.
local
low complexity
google CWE-862
2.1
2020-11-10 CVE-2020-0443 Improper Check for Unusual or Exceptional Conditions vulnerability in Google Android
In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception.
local
low complexity
google CWE-754
2.1
2020-11-10 CVE-2020-0448 Incorrect Default Permissions vulnerability in Google Android
In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check.
local
low complexity
google CWE-276
2.1
2020-11-10 CVE-2020-0453 Incorrect Default Permissions vulnerability in Google Android 8.0/8.1/9.0
In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent.
local
low complexity
google CWE-276
2.1
2020-11-10 CVE-2020-0454 Missing Authorization vulnerability in Google Android 9.0
In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check.
local
low complexity
google CWE-862
2.1
2020-10-14 CVE-2020-0410 Incorrect Default Permissions vulnerability in Google Android
In setNotification of SapServer.java, there is a possible permission bypass due to a PendingIntent error.
local
low complexity
google CWE-276
2.1
2020-10-14 CVE-2020-0412 Incorrect Default Permissions vulnerability in Google Android
In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check.
local
low complexity
google CWE-276
2.1
2020-10-14 CVE-2020-0415 Incorrect Default Permissions vulnerability in Google Android
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent.
local
low complexity
google CWE-276
2.1
2020-10-14 CVE-2020-0419 Missing Authorization vulnerability in Google Android
In generateInfo of PackageInstallerSession.java, there is a possible leak of cross-profile URI data during app installation due to a missing permission check.
local
low complexity
google CWE-862
2.1
2020-10-14 CVE-2020-0422 Insecure Storage of Sensitive Information vulnerability in Google Android
In constructImportFailureNotification of NotificationImportExportListener.java, there is a possible permissions bypass due to an unsafe PendingIntent.
local
low complexity
google CWE-922
2.1