In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07909204; Issue ID: ALPS07909204.
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In SyncStatusObserver, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to local limited information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-128599864
Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to local escalation of privilege, with no additional permissions required. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128599183
Permission control vulnerability in the App Multiplier module Impact:Successful exploitation of this vulnerability may affect functionality and confidentiality.
TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default.
OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.