Vulnerabilities (CVE)

Filtered by CWE-276
Total 1337 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-0317 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In UsageStatsManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119671929
CVE-2020-0316 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154934919
CVE-2020-0315 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155642026
CVE-2020-0313 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154917989
CVE-2020-0312 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099
CVE-2020-0311 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153878642
CVE-2020-0310 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356468
CVE-2020-0308 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Window Manager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153654357
CVE-2020-0307 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645867
CVE-2020-0304 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645695
CVE-2020-0302 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151646375
CVE-2020-0297 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In devicepolicy service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155183624
CVE-2020-0296 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In ADB server and USB server, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153356209
CVE-2020-0295 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155650969
CVE-2020-0294 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-8.0 Android-8.1 Android-9Android ID: A-154915372
CVE-2020-0285 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253479
CVE-2020-0284 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253784
CVE-2020-0276 1 Google 1 Android 2024-11-21 2.1 LOW 5.5 MEDIUM
In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156253586
CVE-2020-0275 1 Google 1 Android 2024-11-21 7.2 HIGH 7.8 HIGH
In MediaProvider, there is a possible way to access ContentResolver and MediaStore entries the app shouldn't have access to due to a permissions bypass. This could lead to local escalation of privilege, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150507736
CVE-2020-0215 1 Google 1 Android 2024-11-21 4.4 MEDIUM 7.8 HIGH
In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypass. This could lead to local escalation of privilege that exposes a pairing Bluetooth MAC address with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1 Android ID: A-140417248