Vulnerabilities > Google > Low

DATE CVE VULNERABILITY TITLE RISK
2022-02-25 CVE-2022-25327 Incorrect Default Permissions vulnerability in Google Fscrypt
The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in.
local
low complexity
google CWE-276
2.1
2022-02-25 CVE-2022-25326 Resource Exhaustion vulnerability in Google Fscrypt
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space.
local
low complexity
google CWE-400
2.1
2022-02-25 CVE-2022-0247 Incorrect Permission Assignment for Critical Resource vulnerability in Google Fuchsia
An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots.
local
low complexity
google CWE-732
2.1
2022-02-11 CVE-2022-24001 Unspecified vulnerability in Google Android 12.0
Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot in clipboard via Edge Panel.
local
low complexity
google
2.1
2022-02-11 CVE-2022-24000 Unspecified vulnerability in Google Android 10.0/11.0/12.0
PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
local
low complexity
google
2.1
2022-02-11 CVE-2022-23999 Unspecified vulnerability in Google Android 10.0/11.0/12.0
PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
local
low complexity
google
2.1
2022-02-11 CVE-2022-23429 Out-of-bounds Read vulnerability in Google Android 10.0/11.0/12.0
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.
local
low complexity
google CWE-125
3.6
2022-02-11 CVE-2022-23427 Unspecified vulnerability in Google Android 10.0/11.0/12.0
PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.
local
low complexity
google
3.6
2022-02-11 CVE-2022-23426 Unspecified vulnerability in Google Android 10.0/11.0
A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.
local
low complexity
google
3.6
2022-02-11 CVE-2022-22291 Unspecified vulnerability in Google Android 10.0/11.0/12.0
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
local
low complexity
google
2.1