Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0001 State: PUBLISHED Published: 2024-09-23T17:25:00.509Z Last Updated: 2024-09-23T17:57:24.819Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Pure Storage Products: FlashArray Problem Types: CWE-1188 Description: A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://purestorage.com/security
CVE ID: CVE-2024-0002 State: PUBLISHED Published: 2024-09-23T17:26:08.811Z Last Updated: 2024-09-23T18:04:46.783Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: PureStorage Products: FlashArray Problem Types: CWE-287 Description: A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://purestorage.com/security
CVE ID: CVE-2024-0003 State: PUBLISHED Published: 2024-09-23T17:27:30.114Z Last Updated: 2024-09-24T13:28:44.669Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: PureStorage Products: FlashArray Problem Types: CWE-269 Description: A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://purestorage.com/security
CVE ID: CVE-2024-0004 State: PUBLISHED Published: 2024-09-23T17:28:53.664Z Last Updated: 2024-09-24T13:37:36.931Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: PureStorage Products: FlashArray Problem Types: CWE-94 Description: A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://purestorage.com/security
CVE ID: CVE-2024-0005 State: PUBLISHED Published: 2024-09-23T17:34:11.321Z Last Updated: 2024-09-24T13:49:20.771Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: PureStorage Products: FlashArray, FlashBlade Problem Types: CWE-77 Description: A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://purestorage.com/security
CVE ID: CVE-2024-0006 State: PUBLISHED Published: 2024-07-19T14:26:14.160Z Last Updated: 2024-08-01T17:41:15.316Z Vendors: YugabyteDB Products: YugabyteDB Anywhere Problem Types: CWE-532 Description: Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs to obtain database user credentials in log files, potentially leading to unauthorized database access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yugabyte/yugabyte-db/commit/439c6286f1971f9ac6bff2c7215b454c2025c593 - https://github.com/yugabyte/yugabyte-db/commit/d96e6b629f34d065b47204daeeb44064e484c579 - https://
2c7215b454c2025c593 - https://github.com/yugabyte/yugabyte-db/commit/d96e6b629f34d065b47204daeeb44064e484c579 - https://github.com/yugabyte/yugabyte-db/commit/5cc7f4e15d6ccccbf97c57946fd0aa630f88c9e2
CVE ID: CVE-2024-0007 State: PUBLISHED Published: 2024-02-14T17:32:08.971Z Last Updated: 2024-08-01T17:41:15.121Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access, Cloud NGFW Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface on Panorama appliances. This enables the impersonation of another authenticated administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltone
r. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-0007
CVE ID: CVE-2024-0008 State: PUBLISHED Published: 2024-02-14T17:32:17.611Z Last Updated: 2025-03-24T19:06:50.475Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access, Cloud NGFW Problem Types: CWE-613 Description: Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-0008
CVE ID: CVE-2024-0009 State: PUBLISHED Published: 2024-02-14T17:32:23.171Z Last Updated: 2024-08-01T17:41:15.849Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access, Cloud NGFW Problem Types: CWE-940 Description: An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-0009
CVE ID: CVE-2024-0010 State: PUBLISHED Published: 2024-02-14T17:32:28.818Z Last Updated: 2025-04-24T15:15:56.007Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access, Cloud NGFW Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://s
to credential theft. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-0010
CVE ID: CVE-2024-0011 State: PUBLISHED Published: 2024-02-14T17:32:34.809Z Last Updated: 2024-08-01T17:41:15.533Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Palo Alto Networks Products: PAN-OS, Prisma Access, Cloud NGFW Problem Types: CWE-79 Description: A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of an authenticated Captive Portal user’s browser) if a user clicks on a malicious link, allowing phishing attacks that could lead to credential theft. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
attacks that could lead to credential theft. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-0011
CVE ID: CVE-2024-0012 State: PUBLISHED Published: 2024-11-18T15:47:41.407Z Last Updated: 2025-10-21T22:55:36.241Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-306 Description: An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management
ty.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2024-0012
CVE ID: CVE-2024-0014 State: PUBLISHED Published: 2024-02-16T00:08:14.746Z Last Updated: 2025-03-28T19:36:56.442Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-02-01
CVE ID: CVE-2024-0015 State: PUBLISHED Published: 2024-02-16T18:33:36.716Z Last Updated: 2025-03-14T18:09:57.683Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70 - https://source.android.com/secu
d.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0016 State: PUBLISHED Published: 2024-02-16T19:33:31.029Z Last Updated: 2024-10-31T14:35:01.693Z Vendors: Google Products: Android Problem Types: Information Disclosure Description: In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/1d7ba7c8a205522f384e8d5c7c9f26a421cab5f1 - https://source.android.com/security/bulletin/2024-0
kages/modules/Bluetooth/+/1d7ba7c8a205522f384e8d5c7c9f26a421cab5f1 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0017 State: PUBLISHED Published: 2024-02-16T19:33:31.218Z Last Updated: 2024-11-04T18:22:41.180Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Camera2/+/5c4c4b35754eef319dcd69c422f0b1ac0c823f6e - https://source.android.com/security/bulletin/20
tform/packages/apps/Camera2/+/5c4c4b35754eef319dcd69c422f0b1ac0c823f6e - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0018 State: PUBLISHED Published: 2024-02-16T19:33:31.399Z Last Updated: 2024-08-15T18:11:46.532Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/bf6406041919f67219fd1829438dda28845d4c23 - https://source.android.com/security/bul
lesource.com/platform/frameworks/av/+/bf6406041919f67219fd1829438dda28845d4c23 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0019 State: PUBLISHED Published: 2024-02-16T19:33:31.592Z Last Updated: 2025-03-13T14:50:24.650Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/707fc94ec3df4cf6b985e6d06c2588690
m Container: References: - https://android.googlesource.com/platform/frameworks/base/+/707fc94ec3df4cf6b985e6d06c2588690d1a025a - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0020 State: PUBLISHED Published: 2024-02-16T19:33:31.785Z Last Updated: 2025-03-19T13:59:39.447Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclosure across users of a device with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/87f791f2351e366f8
VE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/87f791f2351e366f842a0fd6fcb744069160d9a1 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0021 State: PUBLISHED Published: 2024-02-16T19:33:31.985Z Last Updated: 2024-08-28T14:31:23.354Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification listener services due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/53ea491d276f
: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/53ea491d276f9a7c586c7983c08105a9bb7051f1 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0022 State: PUBLISHED Published: 2024-05-07T21:01:28.747Z Last Updated: 2025-03-27T20:52:59.434Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another user profile due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/bdf1cce569c9700965ff6
- CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/bdf1cce569c9700965ff6baee8efd3fb1e8269e8 - https://source.android.com/security/bulletin/2024-04-01
CVE ID: CVE-2024-0023 State: PUBLISHED Published: 2024-02-16T19:36:25.339Z Last Updated: 2024-08-21T20:09:56.603Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/30b1b34cfd5abfcfee759e7d13167d368ac6c268 - https://source.android.com/security/bul
lesource.com/platform/frameworks/av/+/30b1b34cfd5abfcfee759e7d13167d368ac6c268 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2024-0024 State: PUBLISHED Published: 2024-05-07T21:03:30.602Z Last Updated: 2024-08-01T17:41:14.667Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/6a9250ec7fc9801a883cedd7860076f42fb518ac - https://source.a
https://android.googlesource.com/platform/frameworks/base/+/6a9250ec7fc9801a883cedd7860076f42fb518ac - https://source.android.com/security/bulletin/2024-05-01
CVE ID: CVE-2024-0025 State: PUBLISHED Published: 2024-05-07T21:03:30.690Z Last Updated: 2024-08-01T19:23:48.812Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/d49662560e366dbf69bf7d59d00e73905d03e6d5 - https://source.android.com/security/bulle
urce.com/platform/frameworks/base/+/d49662560e366dbf69bf7d59d00e73905d03e6d5 - https://source.android.com/security/bulletin/2024-05-01
CVE ID: CVE-2024-0026 State: PUBLISHED Published: 2024-05-07T21:01:28.832Z Last Updated: 2024-08-01T17:41:15.580Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/a8fb9fe93efdebc4145e00934f42c91742f328de - https://source.android.com/security/bulletin/2024-04
atform/frameworks/base/+/a8fb9fe93efdebc4145e00934f42c91742f328de - https://source.android.com/security/bulletin/2024-04-01
CVE ID: CVE-2024-0027 State: PUBLISHED Published: 2024-05-07T21:01:28.935Z Last Updated: 2024-11-20T21:37:00.487Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/a8fb9fe93efdebc4145e00934f42c91742f328de - https://source.android.com/security/bulletin/2024-04-01
CVE ID: CVE-2024-0028 State: PUBLISHED Published: 2025-09-05T16:10:01.094Z Last Updated: 2025-09-05T16:56:16.231Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/android-16
CVE ID: CVE-2024-0029 State: PUBLISHED Published: 2024-02-16T00:08:15.102Z Last Updated: 2025-03-14T17:35:06.820Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/9b10fd9718f4e6f6843adbfc14e46a93aab93aad - https://source.android.
//android.googlesource.com/platform/frameworks/base/+/9b10fd9718f4e6f6843adbfc14e46a93aab93aad - https://source.android.com/security/bulletin/2024-02-01
CVE ID: CVE-2024-0030 State: PUBLISHED Published: 2024-02-16T00:08:15.454Z Last Updated: 2024-11-06T18:58:07.759Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/57b823f4f758e2ef530909da07552b5aa80c6a7d - https://source.android.com/securi
e.com/platform/packages/modules/Bluetooth/+/57b823f4f758e2ef530909da07552b5aa80c6a7d - https://source.android.com/security/bulletin/2024-02-01
CVE ID: CVE-2024-0031 State: PUBLISHED Published: 2024-02-16T00:08:15.792Z Last Updated: 2024-08-01T17:41:14.691Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/de53890aaca2ae08b3ee2d6e3fd25f702fdfa661 - https://source.android.com/s
source.com/platform/packages/modules/Bluetooth/+/de53890aaca2ae08b3ee2d6e3fd25f702fdfa661 - https://source.android.com/security/bulletin/2024-02-01
CVE ID: CVE-2024-0032 State: PUBLISHED Published: 2024-02-16T00:08:16.134Z Last Updated: 2025-08-26T22:48:29.486Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/a6321142ea43053ea8d0db516eede4c35c5dab18 - https://android.googlesource.com/platfo