Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-24 CVE-2023-21021 Missing Authorization vulnerability in Google Android 13.0
In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settings due to a missing permission check.
local
low complexity
google CWE-862
7.8
2023-03-24 CVE-2023-21022 Out-of-bounds Write vulnerability in Google Android 13.0
In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption.
local
low complexity
google CWE-787
7.8
2023-03-24 CVE-2023-21024 Unspecified vulnerability in Google Android 13.0
In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error.
local
low complexity
google
7.8
2023-03-24 CVE-2023-21027 Unspecified vulnerability in Google Android 13.0
In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code.
network
low complexity
google
7.5
2023-03-24 CVE-2023-21028 Out-of-bounds Read vulnerability in Google Android 13.0
In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator.
network
low complexity
google CWE-125
7.5
2023-03-24 CVE-2023-21030 Double Free vulnerability in Google Android 13.0
In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free.
local
low complexity
google CWE-415
7.8
2023-03-24 CVE-2023-21034 Incorrect Authorization vulnerability in Google Android 13.0
In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass.
local
low complexity
google CWE-863
7.8
2023-03-24 CVE-2023-21035 Incorrect Authorization vulnerability in Google Android 13.0
In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same package name due to a permissions bypass.
local
low complexity
google CWE-863
7.8
2023-03-24 CVE-2023-21040 Unspecified vulnerability in Google Android
In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code.
local
low complexity
google
7.8
2023-03-24 CVE-2023-21041 Out-of-bounds Write vulnerability in Google Android
In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
7.8