deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-9668
Published: 2024-11-13
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 1.7.1001 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1002/modules/countdown/widgets/wpr-countdown.php?rev=3184222; https://www.wordfence.com/threat-intel/vulnerabilities/id/a8e39f0b-eb4c-4568-9f5a-60a0dc3eb6ba?source=cve
CVE: CVE-2024-9682
Published: 2024-11-13
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Form Builder widget in all versions up to, and including, 1.7.1001 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1002/assets/js/frontend.js?rev=3184222#L8771; https://www.wordfence.com/threat-intel/vulnerabilities/id/bd90b85e-22a9-4c08-b2cf-4f75406e7ca3?source=cve
CVE: CVE-2024-11028
Published: 2024-11-13
Description: The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersonation feature inappropriately determining the current user via user-supplied input. This makes it possible for unauthenticated attackers to generate an impersonation link that will allow them to log in as any existing user, such as an administrator. NOTE: The user impersonation feature was disabled in version 1.1.0 and re-enabled with a patch in version 1.1.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://plugins.trac.wordpress.org/changeset/3184657/multimanager-wp; https://plugins.trac.wordpress.org/changeset/3184678/multimanager-wp; https://plugins.trac.wordpress.org/changeset/3184826/multimanager-wp
CVE: CVE-2024-8001
Published: 2024-11-13
Description: A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. A user with the role learner can use the administrative print function with an active session before and after an exam slot to access the entire exam including solutions in the web application. It is recommended to apply a patch to fix this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-863
References: https://vuldb.com/?ctiid.284352; https://vuldb.com/?id.284352; https://www.scip.ch/?news.20241203
CVE: CVE-2024-4741
Published: 2024-11-13
Description: Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause
memory to be accessed that was previously freed in some situations

Impact summary: A use after free can have a range of potential consequences such
as the corruption of valid data, crashes or execution of arbitrary code.
However, only applications that directly call the SSL_free_buffers function are
affected by this issue. Applications that do not call this function are not
vulnerable. Our investigations indicate that this function is rarely used by
applications.

The SSL_free_buffers function is used to free the internal OpenSSL buffer used
when processing an incoming record from the network. The call is only expected
to succeed if the buffer is not currently in use. However, two scenarios have
been identified where the buffer is freed even when still in use.

The first scenario occurs where a record header has been received from the
network and processed by OpenSSL, but the full record body has not yet arrived.
In this case calling SSL_free_buffers will succeed even though a record has only
been partially processed and the buffer is still in use.

The second scenario occurs where a full record containing application data has
been received and processed by OpenSSL but the application has only read part of
this data. Again a call to SSL_free_buffers will succeed even though the buffer
is still in use.

While these scenarios could occur accidentally during normal operation a
malicious attacker could attempt to engineer a stituation where this occurs.
We are not aware of this issue being actively exploited.

The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177; https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d; https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac
CVE: CVE-2024-47574
Published: 2024-11-13
Description: A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.
CVSS Score: 7.8 (HIGH)
CWE: CWE-288, CWE-306
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-199
CVE: CVE-2022-45157
Published: 2024-11-13
Description: A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-522
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-45157; https://github.com/rancher/rancher/security/advisories/GHSA-xj7w-r753-vj8v
CVE: CVE-2024-11159
Published: 2024-11-13
Description: Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1925929; https://www.mozilla.org/security/advisories/mfsa2024-61/; https://www.mozilla.org/security/advisories/mfsa2024-62/
CVE: CVE-2024-48989
Published: 2024-11-13
Description: A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: https://psirt.bosch.com/security-advisories/BOSCH-SA-315415.html
CVE: CVE-2024-11165
Published: 2024-11-13
Description: An information disclosure vulnerability exists in the backup configuration process where the SAS token is not masked in the configuration response. This oversight results in sensitive information leakage within the yb_backup log files, exposing the SAS token in plaintext. The leakage occurs during the backup procedure, leading to potential unauthorized access to resources associated with the SAS token. This issue affects YugabyteDB Anywhere: from 2.20.0.0 before 2.20.7.0, from 2.23.0.0 before 2.23.1.0, from 2024.1.0.0 before 2024.1.3.0.
CWE: CWE-532
References: https://github.com/yugabyte/yugabyte-db/commit/920989b6c0db0222bb7a0cce46febc76cf72d438
CVE: CVE-2024-48510
Published: 2024-11-13
Description: Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://gist.github.com/thomas-chauchefoin-bentley-systems/[PII_REDACTED]16f870f08857cce2aec731; https://github.com/haf/DotNetZip.Semverd; https://github.com/haf/DotNetZip.Semverd/blob/e487179b33a9a0f2631eed5fb04d2c952ea5377a/src/Zip.Shared/ZipEntry.Extract.cs#L1365-L1410
CVE: CVE-2024-48900
Published: 2024-11-13
Description: A vulnerability was found in Moodle. Additional checks are required to ensure users with permission to view badge recipients can only access lists of those they are intended to have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=2318818
CVE: CVE-2024-49504
Published: 2024-11-13
Description: grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.
CWE: CWE-276
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-49504
CVE: CVE-2024-49505
Published: 2024-11-13
Description: A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  REGEX and P parameters.
This issue affects MirrorCache before 1.083.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-49505
CVE: CVE-2024-49506
Published: 2024-11-13
Description: Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of service or set the encryption key for a filesystem
CWE: CWE-377
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-49506
CVE: CVE-2024-50852
Published: 2024-11-13
Description: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://github.com/zp9080/Tenda/blob/main/Tenda-G3v3.0%20V15.11.0.20-formSetUSBPartitionUmount/overview.md
CVE: CVE-2024-50853
Published: 2024-11-13
Description: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://github.com/zp9080/Tenda/blob/main/Tenda-G3v3.0%20V15.11.0.20-formSetDebugCfg/overview.md
CVE: CVE-2024-50854
Published: 2024-11-13
Description: Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/zp9080/Tenda/blob/main/Tenda-G3v3.0%20V15.11.0.20-formSetPortMapping/overview.md
CVE: CVE-2024-9477
Published: 2024-11-13
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firmware: through 14102024.


NOTE: The vendor was contacted and it was learned that the product classified as End-of-Life and End-of-Support.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-24-1851
CVE: CVE-2024-10012
Published: 2024-11-13
Description: In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://docs.telerik.com/devtools/wpf/knowledge-base/kb-security-unsafe-deserialization-cve-2024-10012
CVE: CVE-2024-10013
Published: 2024-11-13
Description: In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://docs.telerik.com/devtools/winforms/knowledge-base/unsafe-deserialization-cve-2024-10013
CVE: CVE-2024-11175
Published: 2024-11-13
Description: A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named b9530b9cc1f5cfdad4b637874f59029a6283a65c. It is recommended to apply a patch to fix this issue.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://gitee.com/sanluan/PublicCMS/commit/b9530b9cc1f5cfdad4b637874f59029a6283a65c; https://gitee.com/sanluan/PublicCMS/issues/IB2BUV; https://vuldb.com/?ctiid.284351
CVE: CVE-2024-50969
Published: 2024-11-13
Description: A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://code-projects.org/jonnys-liquor-in-php-css-javascript-and-mysql-free-download/; https://github.com/Akhlak2511/CVE-2024-50969
CVE: CVE-2024-50970
Published: 2024-11-13
Description: A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Akhlak2511/CVE-2024-50970; https://itsourcecode.com/free-projects/php-project/online-furniture-shop-in-php-projects-free-source-code-and-database/
CVE: CVE-2024-50971
Published: 2024-11-13
Description: A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Akhlak2511/CVE-2024-50971; https://itsourcecode.com/free-projects/php-project/construction-management-system-project-in-php-with-source-code/
CVE: CVE-2024-50972
Published: 2024-11-13
Description: A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Akhlak2511/CVE-2024-50972; https://itsourcecode.com/free-projects/php-project/construction-management-system-project-in-php-with-source-code/
CVE: CVE-2024-52293
Published: 2024-11-13
Description: Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://github.com/craftcms/cms/commit/123e48a696de1e2f63ab519d4730eb3b87beaa58; https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv
CVE: CVE-2024-52295
Published: 2024-11-13
Description: DataEase is an open source data visualization analysis tool. Prior to 2.10.2, DataEase allows attackers to forge jwt and take over services. The JWT secret is hardcoded in the code, and the UID and OID are hardcoded. The vulnerability has been fixed in v2.10.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/dataease/dataease/commit/e755248d59543bcd668ace495f293ff735fa82e9; https://github.com/dataease/dataease/security/advisories/GHSA-45v9-gfcv-xcq6
CVE: CVE-2024-52298
Published: 2024-11-13
Description: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Delegate my view right" feature as long as the attacker can view a page whose last author has access to the attachment. For this, the attacker only needs to provide the reference to a PDF file to the macro. To obtain the reference of the desired attachment, the attacker can access the Page Index, Attachments tab. Even if the UI shows N/A, the user can inspect the page and check the HTTP request that fetches the live data entries. The attachment URL is available in the returned JSON for all attachments, including protected ones and allows getting the necessary values. This vulnerability is fixed in version 2.5.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-615
References: https://github.com/xwikisas/macro-pdfviewer/security/advisories/GHSA-hph4-7j37-7c97
CVE: CVE-2024-52299
Published: 2024-11-13
Description: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment stored in the wiki as the "key" that is passed to prevent this is computed incorrectly, calling skip on the digest stream doesn't update the digest. This is fixed in 2.5.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-340
References: https://github.com/xwikisas/macro-pdfviewer/security/advisories/GHSA-522m-m242-jr9p
CVE: CVE-2024-52300
Published: 2024-11-13
Description: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user who can edit a page. XSS can impact the confidentiality, integrity and availability of the whole XWiki installation when an admin visits the page with the malicious code. This is fixed in 2.5.6.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-80, CWE-79
References: https://github.com/xwikisas/macro-pdfviewer/security/advisories/GHSA-84wx-6vfp-5m6g
CVE: CVE-2024-52305
Published: 2024-11-13
Description: UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG file containing an embedded script. When the profile image is accessed, the embedded script executes, leading to the potential theft of session cookies. This vulnerability is fixed in 0.1.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-616, CWE-692
References: https://github.com/unopim/unopim/commit/9a0da7a0892c60f58df2351b5a9498dcb4cb8b7a; https://github.com/unopim/unopim/security/advisories/GHSA-cgr4-c233-h733
CVE: CVE-2024-52306
Published: 2024-11-13
Description: FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9.
CVSS Score: 7.6 (HIGH)
CWE: CWE-502
References: https://github.com/Laravel-Backpack/FileManager/commit/2830498b85e05fb3c92179053b4d7c4a0fdb880b; https://github.com/Laravel-Backpack/FileManager/security/advisories/GHSA-8237-957h-h2c2
CVE: CVE-2024-7295
Published: 2024-11-13
Description: In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-798
References: https://docs.telerik.com/report-server/knowledge-base/encryption-weakness-cve-2024-7295
CVE: CVE-2024-8049
Published: 2024-11-13
Description: In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: https://docs.telerik.com/devtools/document-processing/knowledge-base/excessive-allocation-cve-2024-8049
CVE: CVE-2024-45594
Published: 2024-11-13
Description: Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.
CVSS Score: 7.7 (HIGH)
CWE: CWE-79
References: https://github.com/decidim/decidim/security/advisories/GHSA-j4h6-gcj7-7v9v
CVE: CVE-2024-51996
Published: 2024-11-13
Description: Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. This vulnerability is fixed in 5.4.47, 6.4.15, and 7.1.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-289
References: https://github.com/symfony/symfony/commit/81354d392c5f0b7a52bcbd729d6f82501e94135a; https://github.com/symfony/symfony/security/advisories/GHSA-cg23-qf8f-62rr
CVE: CVE-2024-52291
Published: 2024-11-13
Description: Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5.
CVSS Score: 8.4 (HIGH)
CWE: CWE-22
References: https://github.com/craftcms/cms/security/advisories/GHSA-jrh5-vhr9-qh7q
CVE: CVE-2024-52292
Published: 2024-11-13
Description: Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, reads the file's content, and converts it into a Base64-encoded string. By embedding this function within a system notification template, the attacker can exfiltrate the Base64-encoded file content through a triggered system email notification. Once the email is received, the Base64 payload can be decoded, allowing the attacker to read arbitrary files on the server. This is fixed in 5.4.9 and 4.12.8.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-552
References: https://github.com/craftcms/cms/security/advisories/GHSA-cw6g-qmjq-6w2w
CVE: CVE-2024-9413
Published: 2024-11-13
Description: The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.
CVSS Score: 8.0 (HIGH)
CWE: CWE-755
References: https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability
CVE: CVE-2024-9476
Published: 2024-11-13
Description: A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizations feature to isolate resources on their Grafana instance.
CWE: CWE-266
References: https://grafana.com/blog/2024/11/12/grafana-security-release-medium-severity-security-fix-for-cve-2024-9476/; https://grafana.com/security/security-advisories/cve-2024-9476/
CVE: CVE-2023-35659
Published: 2024-11-13
Description: In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2024-11-01
CVE: CVE-2023-35686
Published: 2024-11-13
Description: In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2024-11-01