Google Android vulnerabilities

9,646 known vulnerabilities affecting google/android.

Total CVEs
9,646
CISA KEV
48
actively exploited
Public exploits
89
Exploited in wild
44
Severity breakdown
CRITICAL883HIGH5184MEDIUM3317LOW260UNKNOWN2

Vulnerabilities

Page 106 of 483
CVE-2023-38452HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38452 [HIGH] CWE-862 CVE-2023-38452: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38460HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38460 [HIGH] CWE-862 CVE-2023-38460: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38456HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38456 [HIGH] CWE-862 CVE-2023-38456: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38455HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38455 [HIGH] CWE-862 CVE-2023-38455: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38449HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38449 [HIGH] CWE-862 CVE-2023-38449: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38444HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38444 [HIGH] CWE-862 CVE-2023-38444: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38453HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38453 [HIGH] CWE-862 CVE-2023-38453: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38450HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38450 [HIGH] CWE-862 CVE-2023-38450: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-38459HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38459 [HIGH] CWE-862 CVE-2023-38459: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-33915HIGHCVSS 7.5v11.02023-09-04
CVE-2023-33915 [HIGH] CWE-862 CVE-2023-33915: In LTE protocol stack, there is a possible missing permission check. This could lead to remote infor In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
nvd
CVE-2023-38458HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38458 [HIGH] CWE-862 CVE-2023-38458: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-33914HIGHCVSS 7.5v11.0v12.0+1 more2023-09-04
CVE-2023-33914 [HIGH] CWE-20 CVE-2023-33914: In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed
nvd
CVE-2023-38443HIGHCVSS 7.8v11.02023-09-04
CVE-2023-38443 [HIGH] CWE-862 CVE-2023-38443: In vowifiservice, there is a possible missing permission check.This could lead to local escalation o In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
nvd
CVE-2023-32805MEDIUMCVSS 6.5v11.0v12.02023-09-04
CVE-2023-32805 [MEDIUM] CWE-787 CVE-2023-32805: In power, there is a possible out of bounds write due to an insecure default value. This could lead In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08102892; Issue ID: ALPS08102892.
nvd
CVE-2023-32806MEDIUMCVSS 6.7v12.0v13.02023-09-04
CVE-2023-32806 [MEDIUM] CWE-787 CVE-2023-32806: In wlan driver, there is a possible out of bounds write due to improper input validation. This could In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589.
nvd
CVE-2023-38462MEDIUMCVSS 5.5v11.02023-09-04
CVE-2023-38462 [MEDIUM] CWE-862 CVE-2023-38462: In vowifiservice, there is a possible missing permission check.This could lead to local denial of se In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
nvd
CVE-2023-32813MEDIUMCVSS 4.4v13.02023-09-04
CVE-2023-32813 [MEDIUM] CWE-787 CVE-2023-32813: In gnss service, there is a possible out of bounds write due to improper input validation. This coul In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017370; Issue ID: ALPS08017370.
nvd
CVE-2023-20834MEDIUMCVSS 6.4v12.0v13.02023-09-04
CVE-2023-20834 [MEDIUM] CWE-362 CVE-2023-20834: In pda, there is a possible use after free due to a race condition. This could lead to local escalat In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608514; Issue ID: ALPS07608514.
nvd
CVE-2023-32810MEDIUMCVSS 4.4v12.0v13.02023-09-04
CVE-2023-32810 [MEDIUM] CWE-125 CVE-2023-32810: In bluetooth driver, there is a possible out of bounds read due to improper input validation. This c In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07867212; Issue ID: ALPS07867212.
nvd
CVE-2023-38446MEDIUMCVSS 5.5v11.02023-09-04
CVE-2023-38446 [MEDIUM] CWE-862 CVE-2023-38446: In vowifiservice, there is a possible missing permission check.This could lead to local denial of se In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
nvd