CVE-2023-21512
- EPSS 0.07%
- Published 28.06.2023 21:15:09
- Last modified 21.11.2024 07:42:59
Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without proper access permission.
CVE-2023-21513
- EPSS 0.16%
- Published 28.06.2023 21:15:09
- Last modified 05.12.2024 16:15:20
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition.
CVE-2023-21491
- EPSS 0.04%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:56
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.
CVE-2023-21492
- EPSS 0.49%
- Published 04.05.2023 21:15:10
- Last modified 07.02.2025 15:05:07
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
CVE-2023-21493
- EPSS 0.05%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:56
Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data.
CVE-2023-21494
- EPSS 0.78%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:57
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVE-2023-21495
- EPSS 0.04%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:57
Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set.
CVE-2023-21496
- EPSS 0.06%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:57
Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level.
CVE-2023-21497
- EPSS 0.03%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:57
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.
CVE-2023-21498
- EPSS 0.02%
- Published 04.05.2023 21:15:10
- Last modified 21.11.2024 07:42:57
Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory.