Vulnerabilities > Google

DATE CVE VULNERABILITY TITLE RISK
2017-01-12 CVE-2016-6774 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate application data from other applications.
local
high complexity
google CWE-200
4.7
2017-01-12 CVE-2016-6773 Information Exposure vulnerability in Google Android 6.0/6.0.1/7.0
An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels.
local
low complexity
google CWE-200
5.5
2017-01-12 CVE-2016-6772 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google CWE-264
7.8
2017-01-12 CVE-2016-6771 Improper Access Control vulnerability in Google Android 6.0/6.0.1/7.0
An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level.
local
low complexity
google CWE-284
5.3
2017-01-12 CVE-2016-6770 Improper Access Control vulnerability in Google Android
An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level.
local
low complexity
google CWE-284
3.3
2017-01-12 CVE-2016-6769 Improper Access Control vulnerability in Google Android
An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN.
low complexity
google CWE-284
4.6
2017-01-12 CVE-2016-6768 Improper Access Control vulnerability in Google Android
A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process.
local
low complexity
google CWE-284
7.8
2017-01-12 CVE-2016-6767 Resource Management Errors vulnerability in Google Android
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-399
5.5
2017-01-12 CVE-2016-6766 Data Processing Errors vulnerability in Google Android
A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-19
5.5
2017-01-12 CVE-2016-6765 Data Processing Errors vulnerability in Google Android
A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.
local
low complexity
google CWE-19
5.5