Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40070 State: PUBLISHED Published: 2024-05-16T20:47:18.762Z Last Updated: 2024-08-02T18:24:54.801Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Power Gadget software for macOS Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE ID: CVE-2023-40071 State: PUBLISHED Published: 2024-05-16T20:47:45.961Z Last Updated: 2024-08-02T18:24:55.153Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: n/a Products: Intel(R) GPA software installers Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE ID: CVE-2023-40072 State: PUBLISHED Published: 2023-08-18T09:45:31.201Z Last Updated: 2025-07-03T14:01:25.610Z Vendors: ELECOM CO.,LTD. Products: WAB-S600-PS, WAB-S300, WAB-S1775, WAB-M1775-PS, WAB-S1167, WAB-M2133, WAB-I1750-PS, WAB-S1167-PS Problem Types: OS command injection Description: OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20231114-01/ - https://www.elecom.co.jp/news/security/20230810-01/ - https://jvn.jp/en/vu/JV
.elecom.co.jp/news/security/20231114-01/ - https://www.elecom.co.jp/news/security/20230810-01/ - https://jvn.jp/en/vu/JVNVU91630351/
CVE ID: CVE-2023-40073 State: PUBLISHED Published: 2023-12-04T22:40:50.138Z Last Updated: 2024-08-02T18:24:54.873Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/fe6fef4f9c1f75c12bffa4a1d16d9990cc3fbc35 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40074 State: PUBLISHED Published: 2023-12-04T22:40:50.334Z Last Updated: 2024-08-02T18:24:55.056Z Vendors: Google Products: Android Problem Types: Denial of service Description: In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/40e4ea759743737958dde018f3606d778f7a53f3 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40075 State: PUBLISHED Published: 2023-12-04T22:40:50.530Z Last Updated: 2024-08-28T17:46:20.109Z Vendors: Google Products: Android Problem Types: Denial of service Description: In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/ae768fbb9975fdab267f525831cb52f485ab0ecc - htt
References: - https://android.googlesource.com/platform/frameworks/base/+/ae768fbb9975fdab267f525831cb52f485ab0ecc - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40076 State: PUBLISHED Published: 2023-12-04T22:40:50.721Z Last Updated: 2025-05-29T13:47:24.117Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/9b68987df85b681f9362a3cadca6496796d23bbc - https://source.an
https://android.googlesource.com/platform/frameworks/base/+/9b68987df85b681f9362a3cadca6496796d23bbc - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40077 State: PUBLISHED Published: 2023-12-04T22:40:50.938Z Last Updated: 2024-08-02T18:24:54.721Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/58fd993a89a3a22fa5a4a1a4548125c6783ec80c - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40078 State: PUBLISHED Published: 2023-12-04T22:40:51.150Z Last Updated: 2024-08-02T18:24:54.909Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6cdf985a664476659b84d8c74698cb3dfa28f82b - https://source.android
googlesource.com/platform/packages/modules/Bluetooth/+/6cdf985a664476659b84d8c74698cb3dfa28f82b - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40079 State: PUBLISHED Published: 2023-12-04T22:40:51.346Z Last Updated: 2024-08-02T18:24:55.562Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/96e0524c48c6e58af7d15a2caf35082186fc8de2 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40080 State: PUBLISHED Published: 2023-12-04T22:40:51.540Z Last Updated: 2024-08-02T18:24:54.644Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/7b30443dac7bb9138275c909549110191bcbcae9 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40081 State: PUBLISHED Published: 2023-12-04T22:40:51.736Z Last Updated: 2024-08-02T18:24:55.397Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/6fab80f141163de4d0008f7cd081cfc4917c3c68 - https://source.android.com/security/bulletin/2024
/platform/frameworks/base/+/6fab80f141163de4d0008f7cd081cfc4917c3c68 - https://source.android.com/security/bulletin/2024-03-01
CVE ID: CVE-2023-40082 State: PUBLISHED Published: 2023-12-04T22:40:51.922Z Last Updated: 2024-12-02T17:33:08.846Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Virtualization/+/0cf463e9949db2d30755fc63a79225a6158928d3 - https://source.android.co
urce.com/platform/packages/modules/Virtualization/+/0cf463e9949db2d30755fc63a79225a6158928d3 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40083 State: PUBLISHED Published: 2023-12-04T22:40:52.110Z Last Updated: 2024-08-02T18:24:55.532Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/a218e5be5e4049eae3b321f2a535a128d65d00b6 - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ea81185c89097
e5e4049eae3b321f2a535a128d65d00b6 - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ea81185c89097500559d61b3d49fb9633899e848 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40084 State: PUBLISHED Published: 2023-12-04T22:40:52.302Z Last Updated: 2024-08-02T18:24:55.510Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/system/netd/+/1b8bddd96b2efd4074b6d4eee377b62077c031bd - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40085 State: PUBLISHED Published: 2024-02-16T18:33:36.521Z Last Updated: 2024-11-01T15:48:32.614Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/ed6ee1f7eca7b33160e36ac6d730a9ef395ca4f1 - https://source.android.com/s
e.com/platform/packages/modules/NeuralNetworks/+/ed6ee1f7eca7b33160e36ac6d730a9ef395ca4f1 - https://source.android.com/security/bulletin/2024-01-01
CVE ID: CVE-2023-40087 State: PUBLISHED Published: 2023-12-04T22:40:52.488Z Last Updated: 2024-08-28T17:44:04.980Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/243fdf1c0d53bda9e829b4bec9f7c2a824b4d3d1 - https://source.andr
id.googlesource.com/platform/packages/modules/Bluetooth/+/243fdf1c0d53bda9e829b4bec9f7c2a824b4d3d1 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40088 State: PUBLISHED Published: 2023-12-04T22:40:52.675Z Last Updated: 2024-08-02T18:24:55.553Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bfd817719fcf55cbb3476e6b5539a3db4c437f
rences: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5bfd817719fcf55cbb3476e6b5539a3db4c437fc - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40089 State: PUBLISHED Published: 2023-12-04T22:40:52.874Z Last Updated: 2024-08-02T18:24:55.245Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/e2e05f488da6abc765a62e7faf10cb74e729732e -
er: References: - https://android.googlesource.com/platform/frameworks/base/+/e2e05f488da6abc765a62e7faf10cb74e729732e - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40090 State: PUBLISHED Published: 2023-12-04T22:40:53.088Z Last Updated: 2024-08-02T18:24:55.523Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/495417bd068c35de0729d9a332639bd0699153ff - https://source.android.com/securit
.com/platform/packages/modules/Bluetooth/+/495417bd068c35de0729d9a332639bd0699153ff - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40091 State: PUBLISHED Published: 2023-12-04T22:40:53.277Z Last Updated: 2024-08-02T18:24:55.534Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/0ec7b119d41adcbba23f9349e16de9e7e11683f6 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40092 State: PUBLISHED Published: 2023-12-04T22:40:53.469Z Last Updated: 2024-08-02T18:24:55.382Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/a5e55363e69b3c84d3f4011c7b428edb1a25752c - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40093 State: PUBLISHED Published: 2024-02-16T00:08:14.017Z Last Updated: 2024-12-03T18:53:27.525Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/external/pdfium/+/03925281cf25fec70318bf2225356d022b12b566 - https://android.googlesource.com
.googlesource.com/platform/external/pdfium/+/03925281cf25fec70318bf2225356d022b12b566 - https://android.googlesource.com/platform/cts/+/a952c93009cc81c41a086d73a4030a83b7683a04 - https://source.android.com/security/bulletin/2024-02-01
CVE ID: CVE-2023-40094 State: PUBLISHED Published: 2023-12-04T22:40:53.676Z Last Updated: 2024-08-28T17:42:28.539Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/1120bc7e511710b1b774adf29ba47106292365e7 - https://source.android.com/sec
id.googlesource.com/platform/frameworks/base/+/1120bc7e511710b1b774adf29ba47106292365e7 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40095 State: PUBLISHED Published: 2023-12-04T22:40:53.888Z Last Updated: 2024-12-02T17:28:13.725Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/d98abeef8f870b60510feafbadcea0c2f9cbae65 - https://source.android
://android.googlesource.com/platform/frameworks/base/+/d98abeef8f870b60510feafbadcea0c2f9cbae65 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40096 State: PUBLISHED Published: 2023-12-04T22:40:54.088Z Last Updated: 2024-08-02T18:24:54.731Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/b0f6558fb36eb76df35c516ec5a65030a34a8734 - https://android.googlesource.com/platform/framewor
platform/frameworks/base/+/b0f6558fb36eb76df35c516ec5a65030a34a8734 - https://android.googlesource.com/platform/frameworks/native/+/9ddecd3d2b88de5ff7aa890d7ba9967c30d8b183 - https://android.googlesource.com/platform/frameworks/av/+/148aeea373febc959c429f2cabd8323508c38ad8 - https://android.googlesource.com/platform/frameworks/av/+/5f401fc9f214789d691798620fea60015962370a - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40097 State: PUBLISHED Published: 2023-12-04T22:40:54.273Z Last Updated: 2024-08-02T18:24:55.688Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/packages/apps/Launcher3/+/6c9a41117d5a9365cf34e770bbb00138f6bf997e - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40098 State: PUBLISHED Published: 2023-12-04T22:40:54.464Z Last Updated: 2024-08-02T18:24:54.985Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/d21ffbe8a2eeb2a5e6da7efbb1a0430ba6b022e0 - https://source.android.com/secur
.googlesource.com/platform/frameworks/base/+/d21ffbe8a2eeb2a5e6da7efbb1a0430ba6b022e0 - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-40100 State: PUBLISHED Published: 2024-02-15T22:31:14.672Z Last Updated: 2024-08-28T18:56:23.409Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/DnsResolver/+/8e1561fb603fdaec15798372f865fb1750537f4f - https://source.android.com/security/bu
latform/packages/modules/DnsResolver/+/8e1561fb603fdaec15798372f865fb1750537f4f - https://source.android.com/security/bulletin/2023-11-01
CVE ID: CVE-2023-40101 State: PUBLISHED Published: 2023-10-30T17:01:39.631Z Last Updated: 2024-09-17T13:20:31.525Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/android-14