deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-38263
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38263
CVE: CVE-2024-43454
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43454
CVE: CVE-2024-43455
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Spoofing Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43455
CVE: CVE-2024-43457
Published: 2024-09-10
Description: Windows Setup and Deployment Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43457
CVE: CVE-2024-43458
Published: 2024-09-10
Description: Windows Networking Information Disclosure Vulnerability
CVSS Score: 7.7 (HIGH)
CWE: CWE-908, CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43458
CVE: CVE-2024-43461
Published: 2024-09-10
Description: Windows MSHTML Platform Spoofing Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-451
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-43461
CVE: CVE-2024-43463
Published: 2024-09-10
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43463
CVE: CVE-2024-43464
Published: 2024-09-10
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43464
CVE: CVE-2024-43465
Published: 2024-09-10
Description: Microsoft Excel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43465
CVE: CVE-2024-43466
Published: 2024-09-10
Description: Microsoft SharePoint Server Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43466
CVE: CVE-2024-43467
Published: 2024-09-10
Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43467
CVE: CVE-2024-43469
Published: 2024-09-10
Description: Azure CycleCloud Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43469
CVE: CVE-2024-43470
Published: 2024-09-10
Description: Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43470
CVE: CVE-2024-43474
Published: 2024-09-10
Description: Microsoft SQL Server Information Disclosure Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-170
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43474
CVE: CVE-2024-43475
Published: 2024-09-10
Description: Microsoft Windows Admin Center Information Disclosure Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43475
CVE: CVE-2024-43476
Published: 2024-09-10
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43476
CVE: CVE-2024-43479
Published: 2024-09-10
Description: Microsoft Power Automate Desktop Remote Code Execution Vulnerability
CVSS Score: 8.5 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43479
CVE: CVE-2024-43482
Published: 2024-09-10
Description: Microsoft Outlook for iOS Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43482
CVE: CVE-2024-43487
Published: 2024-09-10
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43487
CVE: CVE-2024-43491
Published: 2024-09-10
Description: Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability.
This servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.
Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB editions are still under support.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43491
CVE: CVE-2024-43492
Published: 2024-09-10
Description: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43492
CVE: CVE-2024-43495
Published: 2024-09-10
Description: Windows libarchive Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43495
CVE: CVE-2024-44667
Published: 2024-09-10
Description: Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2_v1.0.1557.15.35_P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-863
References: http://shenzhen.com; https://medium.com/%40sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd
CVE: CVE-2024-44871
Published: 2024-09-10
Description: An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/moziloDasEinsteigerCMS/mozilo3.0; https://github.com/sec-fortress/Exploits/tree/main/CVE-2024-44871
CVE: CVE-2024-44872
Published: 2024-09-10
Description: A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/moziloDasEinsteigerCMS/mozilo3.0; https://github.com/sec-fortress/Exploits/tree/main/CVE-2024-44872
CVE: CVE-2024-44893
Published: 2024-09-10
Description: An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/jeecgboot/JimuReport/issues/2904
CVE: CVE-2024-34831
Published: 2024-09-10
Description: cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/enzored/CVE-2024-34831
CVE: CVE-2024-45409
Published: 2024-09-10
Description: The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-347
References: https://github.com/SAML-Toolkits/ruby-saml/commit/1ec5392bc506fe43a02dbb66b68741051c5ffeae; https://github.com/SAML-Toolkits/ruby-saml/commit/4865d030cae9705ee5cdb12415c654c634093ae7; https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2
CVE: CVE-2024-45596
Published: 2024-09-10
Description: Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authentication URL did not include redirect query string. This happens because on that endpoint for both OpenId and Oauth2 Directus is using the respond middleware, which by default will try to cache GET requests that met some conditions. Although, those conditions do not include this scenario, when an unauthenticated request returns user credentials. This vulnerability is fixed in 10.13.3 and 11.1.0.
CVSS Score: 7.4 (HIGH)
CWE: CWE-524
References: https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b; https://github.com/directus/directus/commit/769fa22797bff5a[PII_REDACTED]b391e013f122e52; https://github.com/directus/directus/security/advisories/GHSA-cff8-x7jv-4fm8
CVE: CVE-2024-43040
Published: 2024-09-10
Description: Renwoxing Enterprise Intelligent Management System before v3.0 was discovered to contain a SQL injection vulnerability via the parid parameter at /fx/baseinfo/SearchInfo.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/X1lyS/75a8ea48c4997b683e8b41c94e79e5f9
CVE: CVE-2024-8232
Published: 2024-09-10
Description: SpiderControl SCADA Web Server has a vulnerability that could allow an 
attacker to upload specially crafted malicious files without 
authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-254-02
CVE: CVE-2024-8503
Published: 2024-09-10
Description: An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate database records. By default, VICIdial stores plaintext credentials within the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://korelogic.com/Resources/Advisories/KL-001-2024-011.txt; https://www.vicidial.org/vicidial.php; http://seclists.org/fulldisclosure/2024/Sep/25
CVE: CVE-2024-8504
Published: 2024-09-10
Description: An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://korelogic.com/Resources/Advisories/KL-001-2024-012.txt; https://www.vicidial.org/vicidial.php; http://seclists.org/fulldisclosure/2024/Sep/26
CVE: CVE-2024-8655
Published: 2024-09-10
Description: A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unknown part of the file /web-static/. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552
References: https://vuldb.com/?ctiid.276963; https://vuldb.com/?id.276963; https://vuldb.com/?submit.401301
CVE: CVE-2024-44103
Published: 2024-09-10
Description: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE: CVE-2024-44104
Published: 2024-09-10
Description: An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0)  allows a local authenticated attacker to escalate their privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-290, CWE-290
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE: CVE-2024-44105
Published: 2024-09-10
Description: Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0)  allows a local authenticated attacker to obtain OS credentials.
CVSS Score: 8.2 (HIGH)
CWE: CWE-319, CWE-319
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE: CVE-2024-44106
Published: 2024-09-10
Description: Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-602
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE: CVE-2024-44107
Published: 2024-09-10
Description: DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE: CVE-2024-8012
Published: 2024-09-10
Description: An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-288, CWE-306
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
CVE: CVE-2024-8190
Published: 2024-09-10
Description: An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190; https://www.cisa.gov/news-events/alerts/2024/09/13/ivanti-releases-security-update-cloud-services-appliance; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8190
CVE: CVE-2024-8191
Published: 2024-09-10
Description: SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022
CVE: CVE-2024-8320
Published: 2024-09-10
Description: Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to spoof Network Isolation status of managed devices.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022
CVE: CVE-2024-8321
Published: 2024-09-10
Description: Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022
CVE: CVE-2024-8322
Published: 2024-09-10
Description: Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1390
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022
CVE: CVE-2024-8441
Published: 2024-09-10
Description: An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022
CVE: CVE-2024-45597
Published: 2024-09-10
Description: Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. Scripts passing user-controlled values to http.request header values are affected. An attacker could use this to send arbitrary requests, potentially leveraging authentication tokens provided in the same headers table.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-93
References: https://github.com/PlutoLang/Pluto/pull/945; https://github.com/PlutoLang/Pluto/security/advisories/GHSA-w8xp-pmx2-37w7
CVE: CVE-2024-23716
Published: 2024-09-11
Description: In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-416
References: https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-31336
Published: 2024-09-11
Description: In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40650
Published: 2024-09-11
Description: In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-358
References: https://android.googlesource.com/platform/packages/apps/Settings/+/2968ccc911956fa5813a9a6a5e5c8970e383a60f; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40652
Published: 2024-09-11
Description: In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://android.googlesource.com/platform/packages/apps/Settings/+/2909433f7d59dcdd0c74044b1c8e9f48927193dc; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40654
Published: 2024-09-11
Description: In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://android.googlesource.com/platform/packages/apps/Settings/+/f1d0079c91734168c150f839168544f407b17b06; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40655
Published: 2024-09-11
Description: In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://android.googlesource.com/platform/packages/services/Telecomm/+/eeef54b37a362f506ea3aa155baddc545b6a909a; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40656
Published: 2024-09-11
Description: In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://android.googlesource.com/platform/packages/services/Telecomm/+/f3e6a6c02439401eb7aeb3749ee5ec0b51a625b9; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40657
Published: 2024-09-11
Description: In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://android.googlesource.com/platform/packages/apps/Settings/+/8261e0ade3b414fea61d7fe9d8bc6df7a3fc8603; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40658
Published: 2024-09-11
Description: In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-269
References: https://android.googlesource.com/platform/frameworks/av/+/6d23fa05a40e5462d4b9bad28afa932e6e12a4f3; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40659
Published: 2024-09-11
Description: In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://android.googlesource.com/platform/packages/modules/RemoteKeyProvisioning/+/c65dce4c6d8d54e47dce79a56e29e2223a2354e6; https://source.android.com/security/bulletin/2024-09-01
CVE: CVE-2024-40662
Published: 2024-09-11
Description: In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://android.googlesource.com/platform/frameworks/base/+/e7af00cafb52a25933ec4edb80c5111d42af0237; https://source.android.com/security/bulletin/2024-09-01