Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2018-05-02 CVE-2013-6272 Improper Access Control vulnerability in Google Android
The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.
local
low complexity
google CWE-284
7.8
2018-04-20 CVE-2014-0900 Improper Input Validation vulnerability in Google Android
The Device Administrator code in Android before 4.4.1_r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure.
network
low complexity
google CWE-20
8.8
2018-04-05 CVE-2017-0431 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in Qualcomm closed source components.
local
low complexity
google
7.8
2018-04-05 CVE-2016-8482 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the NVIDIA GPU driver.
local
low complexity
google CWE-264
7.8
2018-04-05 CVE-2015-9016 Race Condition vulnerability in Google Android
In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request.
local
high complexity
google CWE-362
7.0
2018-04-04 CVE-2017-6424 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Qualcomm WiFi driver.
local
high complexity
google
7.0
2018-04-04 CVE-2017-6423 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the Qualcomm kyro L2 driver.
local
high complexity
google
7.0
2018-04-04 CVE-2016-8486 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm closed source components.
network
low complexity
google CWE-200
7.5
2018-04-04 CVE-2016-8485 Information Exposure vulnerability in Google Android
An information disclosure vulnerability in Qualcomm closed source components.
network
low complexity
google CWE-200
7.5
2018-04-04 CVE-2016-10235 Improper Input Validation vulnerability in Google Android
A denial of service vulnerability in the Qualcomm WiFi driver.
network
low complexity
google CWE-20
7.5