Results
25,043· Page 198/501In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This c
In Core, there is a possible way to start an activity from the background due to a missing permission check. This could
In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. This could lea
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due
In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering.
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due
In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of scr
In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informatio
In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to
In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or ins
In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could le
In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat
In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a pe
In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing pe
In Companion, there is a possible way to keep a service running with elevated importance without showing foreground serv
In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. This could lead to
In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could l
In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. T
In LocationManager, there is a possible way to get location information due to a missing permission check. This could le
In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial
In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local info
In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could le
In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the
In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation o
In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. T
In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no ad
In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of serv
In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source
Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/fi
Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack
A vulnerability classified as critical was found in SourceCodester Gas Agency Management System. Affected by this vulner
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffe
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffe
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free v
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerabi
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.