CVE-2021-0682 (android)
In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
In sendAccessibilityEvent of NotificationManagerService.java, there is a possible disclosure of notification data due to a missing permission check. This could lead to […]
İçeriği inceleyinIn runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local […]
İçeriği inceleyinIn TouchInputMapper::sync of TouchInputMapper.cpp, there is a possible out of bounds write due to a use after free. This could lead to […]
İçeriği inceleyinIn ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of […]
İçeriği inceleyinIn getDefaultSmsPackage of RoleManagerService.java, there is a possible way to get information about the default sms app of a different device user […]
İçeriği inceleyinIn ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could lead to local denial of service […]
İçeriği inceleyinIn lockNow of PhoneWindowManager.java, there is a possible lock screen bypass due to a race condition. This could lead to local escalation […]
İçeriği inceleyinIn RGB_to_BGR1_portable of SkSwizzler_opts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to […]
İçeriği inceleyinAn issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to […]
İçeriği inceleyinA path traversal vulnerability in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory […]
İçeriği inceleyinAn insufficient session expiration vulnerability in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse […]
İçeriği inceleyinAn improper neutralization of input vulnerability in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow […]
İçeriği inceleyin