Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-1004 State: PUBLISHED Published: 2021-12-15T18:06:49 Last Updated: 2024-08-03T15:55:18.450Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197749180 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1005 State: PUBLISHED Published: 2021-12-15T18:06:11 Last Updated: 2024-08-03T15:55:18.358Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-186530889 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/p
86530889 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1006 State: PUBLISHED Published: 2021-12-15T18:06:06 Last Updated: 2024-08-03T15:55:18.460Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-183961974 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1007 State: PUBLISHED Published: 2021-12-15T18:05:56 Last Updated: 2024-08-03T15:55:18.200Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-167759047 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1008 State: PUBLISHED Published: 2021-12-15T18:06:47 Last Updated: 2024-08-03T15:55:18.152Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-197327688 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1009 State: PUBLISHED Published: 2021-12-15T18:06:15 Last Updated: 2024-08-03T15:55:18.434Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-189858128 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bullet
A-189858128 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1010 State: PUBLISHED Published: 2021-12-15T18:06:14 Last Updated: 2024-08-03T15:55:18.486Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-189857801 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1011 State: PUBLISHED Published: 2021-12-15T18:06:12 Last Updated: 2024-08-03T15:55:18.211Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-188219307 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1012 State: PUBLISHED Published: 2021-12-15T18:06:42 Last Updated: 2024-08-03T15:55:18.326Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195412179 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-
CVE ID: CVE-2021-1013 State: PUBLISHED Published: 2021-12-15T18:06:09 Last Updated: 2024-08-03T15:55:18.323Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-186404356 Additional Analyst Notes: - CVE Program Container: References: - htt
AndroidVersions: Android-12Android ID: A-186404356 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1014 State: PUBLISHED Published: 2021-12-15T18:06:12 Last Updated: 2024-08-03T15:55:18.141Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-186776740 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulle
: A-186776740 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1015 State: PUBLISHED Published: 2021-12-15T18:06:10 Last Updated: 2024-08-03T15:55:18.365Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-186530496 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/202
CVE ID: CVE-2021-1016 State: PUBLISHED Published: 2021-12-15T18:06:06 Last Updated: 2024-08-03T15:55:18.438Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-183610267 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1017 State: PUBLISHED Published: 2021-12-15T18:06:04 Last Updated: 2024-08-03T15:55:18.161Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-182583850 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1018 State: PUBLISHED Published: 2021-12-15T18:06:34 Last Updated: 2024-08-03T15:55:18.307Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194110891 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-
tional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1019 State: PUBLISHED Published: 2021-12-15T18:06:40 Last Updated: 2024-08-03T15:55:18.521Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading user consent dialog. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195031401 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1020 State: PUBLISHED Published: 2021-12-15T18:06:41 Last Updated: 2024-08-03T15:55:18.421Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195111725 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1021 State: PUBLISHED Published: 2021-12-15T18:06:41 Last Updated: 2024-08-03T15:55:18.570Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195031703 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1022 State: PUBLISHED Published: 2021-12-15T18:06:00 Last Updated: 2024-08-03T15:55:18.406Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-180420059 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1023 State: PUBLISHED Published: 2021-12-15T18:06:46 Last Updated: 2024-08-03T15:55:18.397Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-195963373 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2
73 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1024 State: PUBLISHED Published: 2021-12-15T18:06:18 Last Updated: 2024-08-03T15:55:18.395Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-191283525 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1025 State: PUBLISHED Published: 2021-12-15T18:06:31 Last Updated: 2024-08-03T15:55:18.489Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193800652 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12
itional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1026 State: PUBLISHED Published: 2021-12-15T18:06:39 Last Updated: 2024-08-03T15:55:18.189Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194798757 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1027 State: PUBLISHED Published: 2021-12-15T18:06:25 Last Updated: 2024-08-03T15:55:18.426Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193033243 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1028 State: PUBLISHED Published: 2021-12-15T18:06:27 Last Updated: 2024-08-03T15:55:18.586Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193034683 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1029 State: PUBLISHED Published: 2021-12-15T18:06:26 Last Updated: 2024-08-03T15:55:18.207Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193034677 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1030 State: PUBLISHED Published: 2021-12-15T18:06:37 Last Updated: 2024-08-03T15:55:18.528Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194697001 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/sec
2Android ID: A-194697001 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1031 State: PUBLISHED Published: 2021-12-15T18:06:38 Last Updated: 2024-08-03T15:55:18.542Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-194697004 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/secur
ndroid ID: A-194697004 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12-01
CVE ID: CVE-2021-1032 State: PUBLISHED Published: 2021-12-15T18:06:08 Last Updated: 2024-08-03T15:55:18.467Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-184745603 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-
CVE ID: CVE-2021-1033 State: PUBLISHED Published: 2022-03-30T16:02:01 Last Updated: 2024-08-03T15:55:18.491Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-185247656 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/android-12l
CVE ID: CVE-2021-1034 State: PUBLISHED Published: 2021-12-15T18:06:28 Last Updated: 2024-08-03T15:55:18.526Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a missing permission check. This could lead to localinformation disclosure with no additional execution privileges needed. Userinteraction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193441322 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2021-12
CVE ID: CVE-2021-1035 State: PUBLISHED Published: 2022-01-14T19:11:22 Last Updated: 2024-08-03T15:55:18.499Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-12Android ID: A-195668284 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/aaos/2022-01-01
CVE ID: CVE-2021-1036 State: PUBLISHED Published: 2022-01-14T19:11:23 Last Updated: 2024-08-03T15:55:18.447Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-182812255 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/aaos/2022-01-01
CVE ID: CVE-2021-1037 State: PUBLISHED Published: 2022-01-14T19:11:25 Last Updated: 2024-08-03T15:55:18.517Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-162951906 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/aaos/2022-01-01