Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2023-07-13 CVE-2023-21254 Unspecified vulnerability in Google Android 13.0
In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic error in the code.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21255 Use After Free vulnerability in multiple products
In multiple functions of binder.c, there is a possible memory corruption due to a use after free.
local
low complexity
google debian CWE-416
7.8
2023-07-13 CVE-2023-21256 Unspecified vulnerability in Google Android 13.0
In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code.
local
low complexity
google
7.8
2023-07-13 CVE-2023-21257 Missing Authorization vulnerability in Google Android 13.0
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-07-13 CVE-2023-21399 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Google Android
there is a possible way to bypass cryptographic assurances due to a logic error in the code.
local
low complexity
google CWE-327
7.8
2023-07-13 CVE-2023-35691 Out-of-bounds Read vulnerability in Google Android
there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.2
2023-07-13 CVE-2023-35694 Out-of-bounds Read vulnerability in Google Android
In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
7.5
2023-07-12 CVE-2023-30916 Missing Authorization vulnerability in Google Android
In DMService, there is a possible missing permission check.
local
low complexity
google CWE-862
7.8
2023-07-12 CVE-2023-30917 Missing Authorization vulnerability in Google Android
In DMService, there is a possible missing permission check.
local
low complexity
google CWE-862
7.8
2023-07-12 CVE-2023-30928 Missing Authorization vulnerability in Google Android
In telephony service, there is a possible missing permission check.
local
low complexity
google CWE-862
7.8