CVE-2016-0822
published 2016-03-12CVE-2016-0822: The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages…
PriorityP427high7CVSS 3.0
AVLACHPRNUIRSUCHIHAH
EPSS
0.46%
37.9th percentile
The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| msrc | microsoft_office_2016_for_mac | — | — |
| msrc | microsoft_office_2019_for_32-bit_editions | — | — |
| msrc | microsoft_office_2019_for_64-bit_editions | — | — |
| msrc | microsoft_office_2019_for_mac | — | — |
| msrc | office_365_proplus_for_32-bit_systems | — | — |
| msrc | office_365_proplus_for_64-bit_systems | — | — |
CVSS provenance
nvdv3.07.0HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.07.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
osv7.0HIGH
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Microsoft Graphics Components Remote Code Execution Vulnerability
vendor_msrc·2019-04-09·CVSS 7.8
CVE-2019-0822 [HIGH] Microsoft Graphics Components Remote Code Execution Vulnerability
Microsoft Graphics Components Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.
FAQ: Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.
FAQ: Are the updates for the Microsoft Office for Mac currently available?
The security update for Microsoft Office 2016 for Mac and Microsoft Office 2019 for Mac are not immediat
Android
CVE-2016-0822: Android Security Bulletin 2016-03-01
CVE: CVE-2016-0822
Severity: HIGH
Affected AOSP versions: 6
vendor_android·2016-03-01·CVSS 7.0
CVE-2016-0822 [HIGH] CVE-2016-0822: Android Security Bulletin 2016-03-01
CVE: CVE-2016-0822
Severity: HIGH
Affected AOSP versions: 6
Android Security Bulletin 2016-03-01
CVE: CVE-2016-0822
Severity: HIGH
Affected AOSP versions: 6.0.1
GHSA
GHSA-9g62-fv9c-5w4c: The MediaTek connectivity kernel driver in Android 6
ghsa_unreviewed·2022-05-17
CVE-2016-0822 [HIGH] GHSA-9g62-fv9c-5w4c: The MediaTek connectivity kernel driver in Android 6
The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
OSV
CVE-2016-0822: The MediaTek connectivity kernel driver in Android 6
osv·2016-03-12·CVSS 7.0
CVE-2016-0822 [HIGH] CVE-2016-0822: The MediaTek connectivity kernel driver in Android 6
The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-03-12
Published