Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-35635 State: PUBLISHED Published: 2023-12-12T18:10:55.125Z Last Updated: 2025-05-22T18:41:55.631Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2 Problem Types: CWE-125 Description: Windows Kernel Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35635
CVE ID: CVE-2023-35636 State: PUBLISHED Published: 2023-12-12T18:10:55.641Z Last Updated: 2025-01-01T02:18:44.099Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2016 Problem Types: CWE-200 Description: Microsoft Outlook Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35636
CVE ID: CVE-2023-35638 State: PUBLISHED Published: 2023-12-12T18:10:48.400Z Last Updated: 2025-01-01T02:18:36.277Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-126 Description: DHCP Server Service Denial of Service Vulnerability Additional Analyst
nstallation) Problem Types: CWE-126 Description: DHCP Server Service Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35638
CVE ID: CVE-2023-35639 State: PUBLISHED Published: 2023-12-12T18:10:48.905Z Last Updated: 2025-01-01T02:18:36.807Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Servi
Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-122 Description: Microsoft ODBC Driver Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guid
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35639
CVE ID: CVE-2023-35641 State: PUBLISHED Published: 2023-12-12T18:10:49.435Z Last Updated: 2025-01-01T02:18:37.337Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Servi
Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-682 Description: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerabili
ity Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35641
CVE ID: CVE-2023-35642 State: PUBLISHED Published: 2023-12-12T18:10:50.004Z Last Updated: 2025-01-01T02:18:37.777Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Ser
7, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-682 Description: Internet Connection Sharing (ICS) Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability
y Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35642
CVE ID: CVE-2023-35643 State: PUBLISHED Published: 2023-12-12T18:10:50.508Z Last Updated: 2025-01-01T02:18:38.345Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-126 Description: DHCP Server Service Information Disclosure Vulnerability Additional Ana
nstallation) Problem Types: CWE-126 Description: DHCP Server Service Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35643
CVE ID: CVE-2023-35644 State: PUBLISHED Published: 2023-12-12T18:10:51.007Z Last Updated: 2025-01-01T02:18:38.815Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-190 Description: Windows Sysmain Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichmen
scription: Windows Sysmain Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35644
CVE ID: CVE-2023-35645 State: PUBLISHED Published: 2023-10-11T18:40:24.221Z Last Updated: 2024-09-18T16:02:17.400Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35646 State: PUBLISHED Published: 2023-10-11T19:19:27.834Z Last Updated: 2024-09-18T18:41:08.177Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35647 State: PUBLISHED Published: 2023-10-11T19:19:54.934Z Last Updated: 2024-09-18T16:01:46.576Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35648 State: PUBLISHED Published: 2023-10-11T19:20:09.906Z Last Updated: 2024-09-18T16:01:17.596Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35649 State: PUBLISHED Published: 2023-10-11T19:20:41.460Z Last Updated: 2024-09-18T16:00:45.832Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35652 State: PUBLISHED Published: 2023-10-11T19:21:00.472Z Last Updated: 2024-09-18T16:00:06.080Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35653 State: PUBLISHED Published: 2023-10-11T19:21:13.242Z Last Updated: 2024-09-18T15:58:41.384Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35654 State: PUBLISHED Published: 2023-10-11T19:21:30.861Z Last Updated: 2024-09-18T16:18:42.477Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35655 State: PUBLISHED Published: 2023-10-11T19:23:16.364Z Last Updated: 2024-09-18T16:18:11.734Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35656 State: PUBLISHED Published: 2023-10-18T19:10:32.026Z Last Updated: 2024-09-13T14:26:24.662Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35657 State: PUBLISHED Published: 2025-09-04T17:11:37.011Z Last Updated: 2025-09-04T19:43:24.312Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/655dbc919736f0a67c5d408e91b6c0a47fb7ccc3 - https://source.android.com/security/bulletin/2025-05-01
CVE ID: CVE-2023-35658 State: PUBLISHED Published: 2023-09-11T20:09:51.810Z Last Updated: 2024-09-26T14:51:50.005Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d03a3020de69143b1fe8129d75e55f14951dd192 - https://source.android.com/
esource.com/platform/packages/modules/Bluetooth/+/d03a3020de69143b1fe8129d75e55f14951dd192 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35659 State: PUBLISHED Published: 2024-11-13T17:13:19.072Z Last Updated: 2024-11-20T16:20:05.777Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-11-01
CVE ID: CVE-2023-35660 State: PUBLISHED Published: 2023-10-11T19:24:44.146Z Last Updated: 2024-09-18T15:53:55.762Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35661 State: PUBLISHED Published: 2023-10-11T19:25:12.469Z Last Updated: 2024-09-18T18:40:10.552Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35662 State: PUBLISHED Published: 2023-10-11T19:25:26.960Z Last Updated: 2024-09-18T15:00:47.479Z Vendors: Google Products: Android Problem Types: Remote code execution Description: there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35663 State: PUBLISHED Published: 2023-10-18T19:10:32.213Z Last Updated: 2024-09-13T14:19:45.909Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-35664 State: PUBLISHED Published: 2023-09-11T20:09:52.027Z Last Updated: 2024-09-26T14:49:42.795Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/NeuralNetworks/+/47299fd978258e67a8eebc361cb7a4dd2936205e - https://source.android.com/s
e.com/platform/packages/modules/NeuralNetworks/+/47299fd978258e67a8eebc361cb7a4dd2936205e - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35665 State: PUBLISHED Published: 2023-09-11T20:09:52.237Z Last Updated: 2024-09-26T14:45:15.695Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/services/Telephony/+/674039e70e1c5bf29b808899ac80c709acc82290 - https://source.android.com/securi
.com/platform/packages/services/Telephony/+/674039e70e1c5bf29b808899ac80c709acc82290 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35666 State: PUBLISHED Published: 2023-09-11T20:09:52.427Z Last Updated: 2024-09-26T14:40:39.522Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/b7ea57f620436c83a9766f928437ddadaa232e3a - https://source.android.com/security/bulletin/2
m/packages/modules/Bluetooth/+/b7ea57f620436c83a9766f928437ddadaa232e3a - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35667 State: PUBLISHED Published: 2023-09-11T20:09:52.613Z Last Updated: 2024-09-26T14:47:51.656Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/d8355ac47e068ad20c6a7b1602e72f058
ment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/d8355ac47e068ad20c6a7b1602e72f0585ec0085 - https://source.android.com/security/bulletin/2023-09-01
CVE ID: CVE-2023-35668 State: PUBLISHED Published: 2023-12-04T22:40:49.750Z Last Updated: 2024-08-28T17:49:58.836Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/b7bd7df91740da680a5c3a84d8dd91b4ca6956dd - https://source.android.com/security/bulle
urce.com/platform/frameworks/base/+/b7bd7df91740da680a5c3a84d8dd91b4ca6956dd - https://source.android.com/security/bulletin/2023-12-01
CVE ID: CVE-2023-35669 State: PUBLISHED Published: 2023-09-11T20:09:52.808Z Last Updated: 2024-09-26T14:25:51.263Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/f810d81839af38ee121c446105ca67cb12992fc6 - http
eferences: - https://android.googlesource.com/platform/frameworks/base/+/f810d81839af38ee121c446105ca67cb12992fc6 - https://source.android.com/security/bulletin/2023-09-01