Google - CVE CyberSecurity Database News (Page 85)

Feb 15, 2024 Bluetooth Google

CVE-2023-40111 - Understanding the Android MediaSession Confused Deputy Vulnerability

--- CVE-2023-40111 is a critical vulnerability in the Android operating system, specifically within the media framework. This bug lets local apps abuse a “confused deputy”

Feb 15, 2024 Exploit Java Google

CVE-2023-40105 - Android’s ActivityManagerService Data Leak Explained (with Code & Exploit Details)

CVE-2023-40105 is a security vulnerability affecting Google’s Android Operating System, specifically within the ActivityManagerService.java component. This bug involves the backupAgentCreated method, and allows

Feb 15, 2024 Exploit Google

CVE-2023-40109 - Android UsbConfiguration Vulnerability Explained with Exploit Walkthrough

In September 2023, Google disclosed CVE-2023-40109, a security vulnerability in the Android framework's UsbConfiguration.java. This vulnerability could let a malicious app bypass

Feb 15, 2024 Exploit Google

CVE-2023-40114 - Use-After-Free Vulnerability in MtpFfsHandle.cpp (Android) Explained — How Attackers Could Escalate Privileges

In August 2023, a new security bug surfaced in Android’s Media Transfer Protocol (MTP) handling code: CVE-2023-40114. This vulnerability lets attackers exploit a use-after-free

Feb 15, 2024 Exploit Java Google

CVE-2023-40113 - Exploiting Missing Permission Checks to Access Cross-User Messages in Android

In recent years, Android has worked hard to tighten permissions and keep user data secure. But even with these protections, sometimes small mistakes slip through.