Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-21237 State: PUBLISHED Published: 2023-06-28T00:00:00.000Z Last Updated: 2025-10-21T23:05:44.154Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2023-06-01
CVE ID: CVE-2023-21238 State: PUBLISHED Published: 2023-07-12T23:22:47.527Z Last Updated: 2024-11-06T16:43:05.995Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/91bfcbbd87886049778142618a655352b16cd911 - https://source.android.com/security/bulletin/2023-07-
tform/frameworks/base/+/91bfcbbd87886049778142618a655352b16cd911 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21239 State: PUBLISHED Published: 2023-07-12T23:23:29.250Z Last Updated: 2024-11-06T16:42:12.140Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/c451aa5710e1da19139eb3716e39a5d6f04de5c2 - https://source.android.com/security
oglesource.com/platform/frameworks/base/+/c451aa5710e1da19139eb3716e39a5d6f04de5c2 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21240 State: PUBLISHED Published: 2023-07-12T23:23:54.255Z Last Updated: 2024-11-06T16:38:22.202Z Vendors: Google Products: Android Problem Types: Denial of service Description: In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Wifi/+/69119d1d3102e27b6473c785125696881bce9563 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21241 State: PUBLISHED Published: 2023-07-12T23:24:58.250Z Last Updated: 2024-11-06T16:37:13.937Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/system/nfc/+/907d17eeefec6f672ea824e126406e6d8f6b56d8 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21242 State: PUBLISHED Published: 2023-08-14T20:58:52.284Z Last Updated: 2024-10-09T14:26:12.319Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770 - https:/
: - https://android.googlesource.com/platform/packages/modules/Wifi/+/72e903f258b5040b8f492cf18edd124b5a1ac770 - https://source.android.com/security/bulletin/2023-08-01
CVE ID: CVE-2023-21243 State: PUBLISHED Published: 2023-07-12T23:25:29.073Z Last Updated: 2024-11-06T16:36:39.252Z Vendors: Google Products: Android Problem Types: Denial of service Description: In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflow. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Wifi/+/5b49b8711efaadadf5052ba85288860c2d7ca7a6 - https://
- https://android.googlesource.com/platform/packages/modules/Wifi/+/5b49b8711efaadadf5052ba85288860c2d7ca7a6 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21244 State: PUBLISHED Published: 2023-10-06T18:48:40.041Z Last Updated: 2025-05-01T19:16:57.257Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/3a448067ac9ebdf669951e90678c2daa592a81d3 - https://android.googlesource.com/platform/fram
com/platform/frameworks/base/+/3a448067ac9ebdf669951e90678c2daa592a81d3 - https://android.googlesource.com/platform/frameworks/base/+/20aedba4998373addc2befcc455a118585559fef - https://android.googlesource.com/platform/frameworks/base/+/5a3d0c131175d923cf35c7beb3ee77a9e6485dad - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-21245 State: PUBLISHED Published: 2023-07-12T23:26:14.971Z Last Updated: 2025-01-06T17:07:22.989Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/a33159e8cb297b9eee6fa
- CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/a33159e8cb297b9eee6fa5c63c0e343d05fad622 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21246 State: PUBLISHED Published: 2023-07-12T23:29:44.442Z Last Updated: 2024-11-06T18:03:47.682Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/fc1b9998ca8a9fceba47d67fd9ea9b45705b53e0 - https://source.and
ttps://android.googlesource.com/platform/frameworks/base/+/fc1b9998ca8a9fceba47d67fd9ea9b45705b53e0 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21247 State: PUBLISHED Published: 2023-07-12T23:30:08.509Z Last Updated: 2024-11-06T17:31:26.493Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54a
SA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21248 State: PUBLISHED Published: 2023-07-12T23:30:29.146Z Last Updated: 2024-11-06T16:02:29.515Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de
P Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21249 State: PUBLISHED Published: 2023-07-12T23:30:49.435Z Last Updated: 2024-11-06T15:56:38.553Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/c00b7e7dbc1fa30339adef693d02a51254755d7f - https://source.android.com/secu
d.googlesource.com/platform/frameworks/base/+/c00b7e7dbc1fa30339adef693d02a51254755d7f - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21250 State: PUBLISHED Published: 2023-07-12T23:32:01.943Z Last Updated: 2024-11-06T15:48:14.827Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ec573bc83f1ed6722f7cb29431dcb2db7f10bf28 - https://source.android.com/security/bulletin/202
packages/modules/Bluetooth/+/ec573bc83f1ed6722f7cb29431dcb2db7f10bf28 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21251 State: PUBLISHED Published: 2023-07-12T23:32:23.341Z Last Updated: 2024-11-05T16:05:31.390Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/57946e2bb73850e817b3c01fa5350d705e178e39 - https://source.android.com/security/bu
esource.com/platform/frameworks/base/+/57946e2bb73850e817b3c01fa5350d705e178e39 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21252 State: PUBLISHED Published: 2023-10-06T18:48:40.232Z Last Updated: 2024-09-19T16:10:21.568Z Vendors: Google Products: Android Problem Types: Denial of service Description: In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Wifi/+/044ab0684153c4effb9f4fda47df43ccdc77bda8 - https://android.google
roid.googlesource.com/platform/packages/modules/Wifi/+/044ab0684153c4effb9f4fda47df43ccdc77bda8 - https://android.googlesource.com/platform/packages/modules/Wifi/+/50b08ee30e04d185e5ae97a5f717d436fd5a90f3 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-21253 State: PUBLISHED Published: 2023-10-06T18:48:40.422Z Last Updated: 2024-09-19T16:07:50.031Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/84df68840b6f2407146e722ebd95a7d8bc6e3529 - https://android.googlesource.com/platform/tools/apksig/+/039f81
eworks/base/+/84df68840b6f2407146e722ebd95a7d8bc6e3529 - https://android.googlesource.com/platform/tools/apksig/+/039f815895f62c9f8af23df66622b66246f3f61e - https://android.googlesource.com/platform/tools/apksig/+/41d882324288085fd32ae0bb70dc85f5fd0e2be7 - https://source.android.com/security/bulletin/2023-10-01
CVE ID: CVE-2023-21254 State: PUBLISHED Published: 2023-07-12T23:32:42.548Z Last Updated: 2024-11-05T15:59:22.827Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/fa539c85503dc63bfb53c76b6f12b3
P Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/fa539c85503dc63bfb53c76b6f12b3549f14a709 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21255 State: PUBLISHED Published: 2023-07-12T23:33:00.244Z Last Updated: 2025-02-13T16:40:10.760Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/kernel/common/+/1ca1130ec62d - https://source.android.com/security/bulletin/2023-07-01 - https://www.debian.org/security/2023/dsa-5480 - https://lists.debian.
/source.android.com/security/bulletin/2023-07-01 - https://www.debian.org/security/2023/dsa-5480 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20240119-0010/
CVE ID: CVE-2023-21256 State: PUBLISHED Published: 2023-07-12T23:33:18.573Z Last Updated: 2024-11-06T14:53:42.744Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/62fc1d269f5e754fc8f00b6167d79c3933b4c1f4 - https://source.android
oid.googlesource.com/platform/packages/apps/Settings/+/62fc1d269f5e754fc8f00b6167d79c3933b4c1f4 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21257 State: PUBLISHED Published: 2023-07-12T23:33:38.516Z Last Updated: 2024-11-06T14:49:25.431Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/1aec7feaf07e6d4568ca75d18158445dbeac10f6 - https
ferences: - https://android.googlesource.com/platform/frameworks/base/+/1aec7feaf07e6d4568ca75d18158445dbeac10f6 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21260 State: PUBLISHED Published: 2023-07-13T00:01:32.075Z Last Updated: 2024-10-30T18:54:40.719Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly contains mis-leading information to be appeared as a system message for user confirmation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/aaos/2023-07-01
CVE ID: CVE-2023-21261 State: REJECTED Published: 2023-07-12T23:33:53.701Z Last Updated: 2023-07-26T22:35:26.378Z Description: No description available.
CVE ID: CVE-2023-21262 State: PUBLISHED Published: 2023-07-12T23:34:24.569Z Last Updated: 2024-11-06T14:40:55.754Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/2c8973c39478cd3c8cf11d9f27cc0556a106d006 - https://source.android.com/security/bulletin/2023-07-01
CVE ID: CVE-2023-21263 State: PUBLISHED Published: 2023-12-04T22:40:48.595Z Last Updated: 2024-08-02T09:28:26.184Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-21264 State: PUBLISHED Published: 2023-08-14T20:59:10.345Z Last Updated: 2024-10-09T14:25:06.851Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/kernel/common/+/b35a06182451f - https://android.googlesource.com/kernel/common/+/53625a846a7b4 -
droid.googlesource.com/kernel/common/+/b35a06182451f - https://android.googlesource.com/kernel/common/+/53625a846a7b4 - https://source.android.com/security/bulletin/2023-08-01
CVE ID: CVE-2023-21265 State: PUBLISHED Published: 2023-08-14T20:59:28.509Z Last Updated: 2024-10-09T19:08:41.995Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/system/ca-certificates/+/6065b4a4c7da9cc9ee01c2f6389575647d2724c4 - https://source.android.com/security/bulletin/2023-08-01
CVE ID: CVE-2023-21266 State: PUBLISHED Published: 2023-10-06T18:48:40.618Z Last Updated: 2025-05-05T14:59:28.865Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/fa94ce5c7738e449cb6bd68c77af4858018e49e0 - https://source.androi
s://android.googlesource.com/platform/frameworks/base/+/fa94ce5c7738e449cb6bd68c77af4858018e49e0 - https://source.android.com/security/bulletin/2024-06-01
CVE ID: CVE-2023-21267 State: PUBLISHED Published: 2023-08-14T20:59:41.378Z Last Updated: 2024-08-02T09:28:26.209Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/cecddcd865f72d76f7aacb1cf4479365847299f9 - https://
ences: - https://android.googlesource.com/platform/frameworks/base/+/cecddcd865f72d76f7aacb1cf4479365847299f9 - https://android.googlesource.com/platform/frameworks/base/+/cb7e9c7549a2a076ec00db15e3da0d21b31b0b1c - https://android.googlesource.com/platform/frameworks/base/+/e205cd30e91d8eeadf562140c34c306ebf7d6394 - https://source.android.com/security/bulletin/2024-04-01
CVE ID: CVE-2023-21268 State: PUBLISHED Published: 2023-08-14T20:59:52.485Z Last Updated: 2024-10-09T18:58:49.964Z Vendors: Google Products: Android Problem Types: Denial of service Description: In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/providers/TelephonyProvider/+/ca4c9a19635119d95900793e7a41b820cd1d94d9 - https://source