Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2016-11-25 CVE-2016-6728 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
low complexity
google CWE-264
7.8
2016-11-25 CVE-2016-6717 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
high complexity
google CWE-264
7.0
2016-11-25 CVE-2016-6707 Permissions, Privileges, and Access Controls vulnerability in Google Android 6.0/6.0.1/7.0
An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google CWE-264
7.8
2016-11-25 CVE-2016-6705 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in Mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google CWE-264
7.8
2016-11-25 CVE-2016-6704 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google CWE-264
7.8
2016-11-25 CVE-2016-6703 Improper Access Control vulnerability in Google Android
A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process.
local
low complexity
google CWE-284
7.8
2016-11-25 CVE-2016-6702 Improper Access Control vulnerability in Google Android
A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process.
local
low complexity
google CWE-284
7.8
2016-11-25 CVE-2016-6701 Improper Access Control vulnerability in Google Android
A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing.
local
low complexity
google CWE-284
7.8
2016-11-25 CVE-2016-6700 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in libzipfile in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google CWE-264
7.8
2016-11-25 CVE-2016-3904 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
low complexity
google CWE-264
7.8