Vulnerabilidades en google
5229 resultadosCVE-2025-32349HIGHIn multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack. This could lead to local escalation of pEPSS 0.1%CVE-2023-40124MEDIUMIn multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photEPSS 0.1%CVE-2023-21384—In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disEPSS 0.1%CVE-2023-21355—In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with noEPSS 0.1%CVE-2025-48545HIGHIn isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This coEPSS 0.1%CVE-2023-21320—In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information diEPSS 0.1%CVE-2024-27237MEDIUMIn wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local EPSS 0.1%CVE-2018-9390MEDIUMIn procfile_write of gl_proc.c, there is a possible out of bounds read of a
function pointer due to an incorrect bounds check. This couEPSS 0.1%CVE-2023-21249—In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. TEPSS 0.1%CVE-2023-21360—In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege witEPSS 0.1%CVE-2023-40134—In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local infEPSS 0.1%CVE-2025-48613HIGHIn VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the EPSS 0.1%CVE-2024-29744MEDIUMIn tmu_get_gov_time_windows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discEPSS 0.1%CVE-2025-22424HIGHIn multiple locations, there is a possible way to reveal images across users due to improper input validation. This could lead to local escaEPSS 0.1%CVE-2023-21312—In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with EPSS 0.1%CVE-2023-21317—In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatEPSS 0.1%CVE-2023-21235—In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permisEPSS 0.1%CVE-2024-49728MEDIUMIn generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lEPSS 0.1%CVE-2023-40136—In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local EPSS 0.1%CVE-2023-21165HIGHIn DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local eEPSS 0.1%