Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

10,650 of 25,043· Page 86/213
5.5
CVE-2022-20332

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to s

5.5
CVE-2022-20326

In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to lo

5.5
CVE-2022-20324

In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side c

5.5
CVE-2022-20323

In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lea

5.5
CVE-2022-20322

In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead t

5.5
CVE-2022-20317

In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This

6.7
CVE-2022-20314

In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could le

6.8
CVE-2022-20313

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

5.5
CVE-2022-20312

In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission chec

6.7
CVE-2022-20306

In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalati

5.5
CVE-2022-20304

In Content, there is a possible way to determinate the user's account due to side channel information disclosure. This c

5.5
CVE-2022-20303

In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission d

5.5
CVE-2022-20301

In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This

5.5
CVE-2022-20300

In Content, there is a possible way to check if the given account exists on the device due to a missing permission check

5.5
CVE-2022-20299

In ContentService, there is a possible way to check if the given account exists on the device due to a missing permissio

5.5
CVE-2022-20298

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check

5.5
CVE-2022-20296

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check

5.5
CVE-2022-20295

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check

5.5
CVE-2022-20294

In Content, there is a possible way to learn about an account present on the device due to a missing permission check. T

5.5
CVE-2022-20293

In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to sid

5.5
CVE-2022-20291

In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to si

5.5
CVE-2022-20290

In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. This could lead to loc

5.5
CVE-2022-20289

In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to

5.5
CVE-2022-20288

In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions,

5.5
CVE-2022-20287

In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions,

5.5
CVE-2022-20285

In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to s

5.5
CVE-2022-20284

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local inf

5.5
CVE-2022-20279

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

5.5
CVE-2022-20278

In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering.

5.5
CVE-2022-20277

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

5.5
CVE-2022-20276

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

5.5
CVE-2022-20275

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due

6.5
CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informatio

5.5
CVE-2022-20272

In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to

5.5
CVE-2022-20270

In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. This could le

6.8
CVE-2022-20269

In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

5.0
CVE-2022-20266

In Companion, there is a possible way to keep a service running with elevated importance without showing foreground serv

4.6
CVE-2022-20265

In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. This could lead to

5.5
CVE-2022-20263

In ActivityManager, there is a way to read process state for other users due to a missing permission check. This could l

5.5
CVE-2022-20260

In the Phone app, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial

5.5
CVE-2022-20259

In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. This could lead to local info

6.4
CVE-2022-20256

In the Audio HAL, there is a possible out of bounds write due to a race condition. This could lead to local escalation o

4.4
CVE-2022-20255

In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. T

6.5
CVE-2022-20253

In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of serv

6.9
CVE-2022-2503

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/fi

6.1
CVE-2022-2390

Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed

5.3
CVE-2022-38180

In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases

4.7
CVE-2022-38179

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack

6.3
CVE-2022-2779

A vulnerability classified as critical was found in SourceCodester Gas Agency Management System. Affected by this vulner

5.5
CVE-2022-35678

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.