p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de android · Página 8

Vulnerabilidades publicadas para android en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 412

  1. CVE-2017-0433

    Alta · CVSS 7EPSS 1,01%Sin corrección publicada

    CVE-2017-0433

    An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913571.

    Publicación Actualización
  2. CVE-2017-0430

    Alta · CVSS 7.8EPSS 0,89%Sin corrección publicada

    CVE-2017-0430

    An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32838767. References: B-RB#107459.

    Publicación Actualización
  3. CVE-2017-0429

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0429

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32636619. References: N-CVE-2017-0429.

    Publicación Actualización
  4. CVE-2017-0428

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0428

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32401526. References: N-CVE-2017-0428.

    Publicación Actualización
  5. CVE-2017-0427

    Alta · CVSS 7.8EPSS 0,98%Sin corrección publicada

    CVE-2017-0427

    An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31495866.

    Publicación Actualización
  6. CVE-2017-0426

    Media · CVSS 5.5EPSS 0,63%Sin corrección publicada

    CVE-2017-0426

    An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32799236.

    Publicación Actualización
  7. CVE-2017-0425

    Media · CVSS 5.5EPSS 0,56%Sin corrección publicada

    CVE-2017-0425

    An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32720785.

    Publicación Actualización
  8. CVE-2017-0424

    Media · CVSS 5.5EPSS 0,8%Sin corrección publicada

    CVE-2017-0424

    An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it is a general bypass for a user level defense in depth or exploit mitigation technology in a privileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322450.

    Publicación Actualización
  9. CVE-2017-0423

    Media · CVSS 5.3EPSS 0,33%Sin corrección publicada

    CVE-2017-0423

    An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586.

    Publicación Actualización
  10. CVE-2017-0422

    Alta · CVSS 7.5EPSS 1,6%Sin corrección publicada

    CVE-2017-0422

    A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322088.

    Publicación Actualización
  11. CVE-2017-0421

    Media · CVSS 5.5EPSS 0,56%Sin corrección publicada

    CVE-2017-0421

    An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32555637.

    Publicación Actualización
  12. CVE-2017-0420

    Media · CVSS 5.5EPSS 0,65%Sin corrección publicada

    CVE-2017-0420

    An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212.

    Publicación Actualización
  13. CVE-2017-0419

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0419

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32220769.

    Publicación Actualización
  14. CVE-2017-0418

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0418

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32703959.

    Publicación Actualización
  15. CVE-2017-0417

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0417

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438.

    Publicación Actualización
  16. CVE-2017-0416

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0416

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609.

    Publicación Actualización
  17. CVE-2017-0415

    Alta · CVSS 7.8EPSS 0,91%Sin corrección publicada

    CVE-2017-0415

    An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020.

    Publicación Actualización
  18. CVE-2017-0414

    Media · CVSS 5.5EPSS 0,56%Sin corrección publicada

    CVE-2017-0414

    An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795.

    Publicación Actualización
  19. CVE-2017-0413

    Media · CVSS 5.5EPSS 0,65%Sin corrección publicada

    CVE-2017-0413

    An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32161610.

    Publicación Actualización
  20. CVE-2017-0412

    Alta · CVSS 7.8EPSS 2,54%Código de explotación públicoSin corrección publicada

    CVE-2017-0412

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926.

    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →