p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de android · Page n° 8

Vulnérabilité publiée pour android au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 412

  1. CVE-2017-0433

    Élevée · CVSS 7EPSS 1,01%Aucun correctif publié

    CVE-2017-0433

    An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913571.

    Publication Mise à jour
  2. CVE-2017-0430

    Élevée · CVSS 7.8EPSS 0,89%Aucun correctif publié

    CVE-2017-0430

    An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32838767. References: B-RB#107459.

    Publication Mise à jour
  3. CVE-2017-0429

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0429

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32636619. References: N-CVE-2017-0429.

    Publication Mise à jour
  4. CVE-2017-0428

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0428

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32401526. References: N-CVE-2017-0428.

    Publication Mise à jour
  5. CVE-2017-0427

    Élevée · CVSS 7.8EPSS 0,98%Aucun correctif publié

    CVE-2017-0427

    An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31495866.

    Publication Mise à jour
  6. CVE-2017-0426

    Moyenne · CVSS 5.5EPSS 0,63%Aucun correctif publié

    CVE-2017-0426

    An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32799236.

    Publication Mise à jour
  7. CVE-2017-0425

    Moyenne · CVSS 5.5EPSS 0,56%Aucun correctif publié

    CVE-2017-0425

    An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32720785.

    Publication Mise à jour
  8. CVE-2017-0424

    Moyenne · CVSS 5.5EPSS 0,8%Aucun correctif publié

    CVE-2017-0424

    An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it is a general bypass for a user level defense in depth or exploit mitigation technology in a privileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322450.

    Publication Mise à jour
  9. CVE-2017-0423

    Moyenne · CVSS 5.3EPSS 0,33%Aucun correctif publié

    CVE-2017-0423

    An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32612586.

    Publication Mise à jour
  10. CVE-2017-0422

    Élevée · CVSS 7.5EPSS 1,6%Aucun correctif publié

    CVE-2017-0422

    A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322088.

    Publication Mise à jour
  11. CVE-2017-0421

    Moyenne · CVSS 5.5EPSS 0,56%Aucun correctif publié

    CVE-2017-0421

    An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32555637.

    Publication Mise à jour
  12. CVE-2017-0420

    Moyenne · CVSS 5.5EPSS 0,65%Aucun correctif publié

    CVE-2017-0420

    An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212.

    Publication Mise à jour
  13. CVE-2017-0419

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0419

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32220769.

    Publication Mise à jour
  14. CVE-2017-0418

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0418

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32703959.

    Publication Mise à jour
  15. CVE-2017-0417

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0417

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438.

    Publication Mise à jour
  16. CVE-2017-0416

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0416

    An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609.

    Publication Mise à jour
  17. CVE-2017-0415

    Élevée · CVSS 7.8EPSS 0,91%Aucun correctif publié

    CVE-2017-0415

    An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020.

    Publication Mise à jour
  18. CVE-2017-0414

    Moyenne · CVSS 5.5EPSS 0,56%Aucun correctif publié

    CVE-2017-0414

    An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795.

    Publication Mise à jour
  19. CVE-2017-0413

    Moyenne · CVSS 5.5EPSS 0,65%Aucun correctif publié

    CVE-2017-0413

    An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32161610.

    Publication Mise à jour
  20. CVE-2017-0412

    Élevée · CVSS 7.8EPSS 2,54%Code d’exploitation publicAucun correctif publié

    CVE-2017-0412

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926.

    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →