Vulnerabilities (CVE)

Filtered by NVD-CWE-noinfo
Total 33585 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-0418 1 Google 1 Android 2024-11-21 4.6 MEDIUM 7.8 HIGH
In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-153879813
CVE-2020-0415 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795
CVE-2020-0400 1 Google 1 Android 2024-11-21 4.9 MEDIUM 5.5 MEDIUM
In showDataRoamingNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-153356561
CVE-2020-0399 1 Google 1 Android 2024-11-21 4.9 MEDIUM 5.5 MEDIUM
In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-153993591
CVE-2020-0398 1 Google 1 Android 2024-11-21 4.9 MEDIUM 5.5 MEDIUM
In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-154323381
CVE-2020-0397 1 Google 1 Android 2024-11-21 4.9 MEDIUM 5.5 MEDIUM
In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155092443
CVE-2020-0396 1 Google 1 Android 2024-11-21 4.9 MEDIUM 5.5 MEDIUM
In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-155094269
CVE-2020-0395 1 Google 1 Android 2024-11-21 4.9 MEDIUM 5.5 MEDIUM
In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-154124307
CVE-2020-0391 1 Google 1 Android 2024-11-21 7.2 HIGH 7.8 HIGH
In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenforced protected-broadcast. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-158570769
CVE-2020-0389 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156959408
CVE-2020-0379 1 Google 1 Android 2024-11-21 2.9 LOW 5.7 MEDIUM
In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote information disclosure of sensitive information with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10 Android-11Android ID: A-150156492
CVE-2020-0360 1 Google 1 Android 2024-11-21 6.8 MEDIUM 7.8 HIGH
In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-145129456
CVE-2020-0338 1 Google 1 Android 2024-11-21 1.9 LOW 5.0 MEDIUM
In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107
CVE-2020-0337 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In MediaProvider, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local information disclosure, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124329382
CVE-2020-0331 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147309310
CVE-2020-0315 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155642026
CVE-2020-0313 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154917989
CVE-2020-0312 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099
CVE-2020-0311 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878642
CVE-2020-0310 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356468