CVE-2022-20327
- EPSS 0.01%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploita...
CVE-2022-20328
- EPSS 0.01%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for ...
CVE-2022-20329
- EPSS 0.01%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Pr...
CVE-2022-20330
- EPSS 0.02%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not...
CVE-2022-20331
- EPSS 0.02%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed fo...
CVE-2022-20332
- EPSS 0.02%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2022-20333
- EPSS 0.16%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...
CVE-2022-20334
- EPSS 0.14%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...
CVE-2022-20335
- EPSS 0.02%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:36
In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera...
CVE-2022-20336
- EPSS 0.01%
- Veröffentlicht 12.08.2022 15:15:12
- Zuletzt bearbeitet 21.11.2024 06:42:37
In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applications allow-listed to use the network during VPN lockdown mode with no additional execution...