Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-48537 State: PUBLISHED Published: 2025-09-04T18:34:16.616Z Last Updated: 2025-09-04T20:24:07.971Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/63aab59ce13856799a7c24a70b35625d32ae5357 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48538 State: PUBLISHED Published: 2025-09-04T18:34:17.642Z Last Updated: 2025-09-04T20:22:57.955Z Vendors: Google Products: Android Problem Types: Denial of service Description: In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/bd7578b738a09734a2d23656e5569643ad37fffe - https://source.android.com/security/b
lesource.com/platform/frameworks/base/+/bd7578b738a09734a2d23656e5569643ad37fffe - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48539 State: PUBLISHED Published: 2025-09-04T18:34:18.652Z Last Updated: 2025-09-06T03:56:12.402Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c881220f499edcbdff9a7efdf00beeaeba084245 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48540 State: PUBLISHED Published: 2025-09-04T18:34:19.631Z Last Updated: 2025-09-05T03:56:01.713Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/native/+/570e2d6e29ee10879150f868913c285a45a936b1 - https://android.googlesource.com/platform/frameworks/native/
meworks/native/+/570e2d6e29ee10879150f868913c285a45a936b1 - https://android.googlesource.com/platform/frameworks/native/+/ba4ea3598e6dcea4b7b2202f4cec11eb1d85c2a7 - https://android.googlesource.com/platform/frameworks/native/+/7fb4755c9d93bf75de13f2bc458fbbb547a79dd6 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48541 State: PUBLISHED Published: 2025-09-04T18:34:20.644Z Last Updated: 2025-09-05T03:56:00.741Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/apps/Settings/+/aba2077a6c03f6d7b1a315c275e186ea0f2c1b6b - https://source.android.com/security/bul
com/platform/packages/apps/Settings/+/aba2077a6c03f6d7b1a315c275e186ea0f2c1b6b - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48542 State: PUBLISHED Published: 2025-09-04T18:34:21.658Z Last Updated: 2025-09-04T19:52:22.875Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/7ed50e5b5d568bc8be5d3603991aa9add67a7f44 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48543 State: PUBLISHED Published: 2025-09-04T18:34:22.655Z Last Updated: 2025-10-21T22:45:18.649Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48544 State: PUBLISHED Published: 2025-09-04T18:34:23.649Z Last Updated: 2025-09-05T17:04:49.134Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/providers/MediaProvider/+/c34a7f642548130e95dc374035d5a3564d30599f - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48545 State: PUBLISHED Published: 2025-09-04T18:34:24.644Z Last Updated: 2025-09-04T20:20:54.584Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy. This could lead to local privilege escalation with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/66ac17909252c80b0edf7f4ae282bce4579410ad - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48546 State: PUBLISHED Published: 2025-09-04T18:34:25.673Z Last Updated: 2025-09-05T18:37:56.009Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/8b660e88700541ca70a01c7b25a52587ec65411f - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48547 State: PUBLISHED Published: 2025-09-04T18:34:26.685Z Last Updated: 2025-09-05T18:36:54.434Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Permission/+/5dca0ccb26f2b99d706a1d3e9402f851e849c913 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48548 State: PUBLISHED Published: 2025-09-04T18:34:27.710Z Last Updated: 2025-09-05T03:55:57.303Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/acbd37d21c2feffb6d64e669b956d59a6062b751 - https://android.googlesource.com/platform
urce.com/platform/frameworks/base/+/acbd37d21c2feffb6d64e669b956d59a6062b751 - https://android.googlesource.com/platform/frameworks/av/+/8c09eb1034cb3b02a66f6c241c0b9c9981998d6f - https://android.googlesource.com/platform/frameworks/av/+/37e7f808fad105da187b021fb762a66d37c9212a - https://android.googlesource.com/platform/frameworks/base/+/00344da68fce6ec4f7a1bf36f0ea3797805f00ce - https://android.googlesource.com/platform/frameworks/base/+/20e363e2225843ff3cc7d6bea05ae2f4db83b408 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48549 State: PUBLISHED Published: 2025-09-04T18:34:28.739Z Last Updated: 2025-09-05T03:55:56.457Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/acbd37d21c2feffb6d64e669b956d59a6062b751 - https://android.googlesource.com/platform/frameworks/av/+/8c09eb103
ks/base/+/acbd37d21c2feffb6d64e669b956d59a6062b751 - https://android.googlesource.com/platform/frameworks/av/+/8c09eb1034cb3b02a66f6c241c0b9c9981998d6f - https://android.googlesource.com/platform/frameworks/av/+/37e7f808fad105da187b021fb762a66d37c9212a - https://android.googlesource.com/platform/frameworks/base/+/00344da68fce6ec4f7a1bf36f0ea3797805f00ce - https://android.googlesource.com/platform/frameworks/base/+/20e363e2225843ff3cc7d6bea05ae2f4db83b408 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48550 State: PUBLISHED Published: 2025-09-04T18:34:29.739Z Last Updated: 2025-09-04T20:18:50.739Z Vendors: Google Products: Android Problem Types: Denial of service Description: In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/354820f6ec38e8c50140bb5247779d3a3423b4c4 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48551 State: PUBLISHED Published: 2025-09-04T18:34:30.724Z Last Updated: 2025-09-04T20:18:10.874Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/IntentResolver/+/13c30b464d042f3e00899ffcf1c02b76bc35f769 - https://source.android.com/security/bulletin/2
kages/modules/IntentResolver/+/13c30b464d042f3e00899ffcf1c02b76bc35f769 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48552 State: PUBLISHED Published: 2025-09-04T18:34:31.731Z Last Updated: 2025-09-05T18:39:30.144Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/bb6d2f17243ddd4313f826b9ac6119fb40962ee7 - https://source.android.com/security/bull
ource.com/platform/frameworks/base/+/bb6d2f17243ddd4313f826b9ac6119fb40962ee7 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48553 State: PUBLISHED Published: 2025-09-04T18:34:32.730Z Last Updated: 2025-09-05T18:38:56.949Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/660c7075dc00d23a47f8b2018d62c66b8e27c450 - https://source.android.com/security/bulletin/2025
/platform/frameworks/base/+/660c7075dc00d23a47f8b2018d62c66b8e27c450 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48554 State: PUBLISHED Published: 2025-09-04T18:34:33.748Z Last Updated: 2025-09-05T13:46:22.611Z Vendors: Google Products: Android Problem Types: Denial of service Description: In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/660c7075dc00d23a47f8b2018d62c66b8e27c450 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48556 State: PUBLISHED Published: 2025-09-04T18:34:34.767Z Last Updated: 2025-09-05T03:55:54.022Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/fc5d9b6ef5305263d37404fc3d4afe583a15c62b - https://source.android.com/security/bulletin/2025-09
atform/frameworks/base/+/fc5d9b6ef5305263d37404fc3d4afe583a15c62b - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48558 State: PUBLISHED Published: 2025-09-04T18:34:35.810Z Last Updated: 2025-09-05T03:55:53.202Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit intent hijacking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/0d30c78c8953adfc969a8dba8a58a8ea3571908c - https://source.android.com/secur
.googlesource.com/platform/frameworks/base/+/0d30c78c8953adfc969a8dba8a58a8ea3571908c - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48559 State: PUBLISHED Published: 2025-09-04T18:34:36.799Z Last Updated: 2025-09-04T20:17:13.154Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/7b88db4928f390cb7656dcc4a14fac2d645301a9 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48560 State: PUBLISHED Published: 2025-09-04T18:34:37.798Z Last Updated: 2025-09-04T20:16:37.128Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2025-09-01
CVE ID: CVE-2025-48561 State: PUBLISHED Published: 2025-09-04T18:34:38.810Z Last Updated: 2025-09-08T19:05:09.392Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/native/+/20465375a1d0cb71cdb891235a9f8a3fba31dbf6 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48562 State: PUBLISHED Published: 2025-09-04T18:34:39.793Z Last Updated: 2025-09-08T18:59:15.112Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/252efec89b01a89b4d394c500e9dae2b6c08dbae - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48563 State: PUBLISHED Published: 2025-09-04T18:34:40.807Z Last Updated: 2025-09-05T03:55:52.241Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/a6a570a6f4972c1dfea13c5fe3558805c1658991 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2025-48581 State: PUBLISHED Published: 2025-09-04T18:34:41.808Z Last Updated: 2025-11-18T04:51:56.603Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/build/+/cda08bfbf55aed1e4c79efe6a66bb930d19a8a13 - https://android.googlesource.com/platform/system/apex/+/5a33fa4202cb5
build/+/cda08bfbf55aed1e4c79efe6a66bb930d19a8a13 - https://android.googlesource.com/platform/system/apex/+/5a33fa4202cb5f06d7f02f3a2b8d13780d7cb3f5 - https://android.googlesource.com/platform/system/apex/+/13bbfe3ef2953e9805d57d3219cc122e485ba90f - https://source.android.com/security/bulletin/2025-11-01
CVE ID: CVE-2025-48593 State: PUBLISHED Published: 2025-11-18T04:51:57.663Z Last Updated: 2025-11-19T04:55:23.721Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c69c78d7c4f623201f35831d32e6c401156e76cc - https://android.googlesource.com/platform/packages/modules/Bluetoo
luetooth/+/c69c78d7c4f623201f35831d32e6c401156e76cc - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5ed63461b44198c80d5aff7e1af1df812f782abb - https://source.android.com/security/bulletin/2025-11-01
CVE ID: CVE-2025-48695 State: PUBLISHED Published: 2025-05-23T00:00:00.000Z Last Updated: 2025-05-23T13:20:39.550Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: CyberDAVA Products: CyberDAVA Problem Types: CWE-266 Description: An issue was discovered in CyberDAVA before 1.1.20. A privilege escalation vulnerability allows a low-privileged user to escalate their privilege by abusing the following API due to the lack of access control: /api/v2/users/user/<user id>/role/ROLE/<Target role> (admin access can be achieved). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cyberdava.com - https://github.com/michaelcheung-research/Vulnera
es: - CISA ADP Vulnrichment: References: - https://www.cyberdava.com - https://github.com/michaelcheung-research/Vulnerability-Disclosure/blob/main/CVE-2025-CyberDava1/README.md?plain=1
CVE ID: CVE-2025-48699 State: REJECTED Published: N/A Last Updated: 2025-06-12T20:06:31.278Z Description: No description available.
CVE ID: CVE-2025-48700 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T15:57:02.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is t
ctures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE ID: CVE-2025-48701 State: PUBLISHED Published: 2025-05-23T00:00:00.000Z Last Updated: 2025-05-23T13:22:17.392Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: openDCIM Products: openDCIM Problem Types: CWE-89 Description: openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opendcim/openDCIM/issues/1601