CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2016-6710
https://notcve.org/view.php?id=CVE-2016-6710
25 Nov 2016 — An information disclosure vulnerability in the download manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Android ID: A-30537115. Una vulnerabilidad de divulgación de información en el gestor de ... • http://www.securityfocus.com/bid/94170 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2016-6713
https://notcve.org/view.php?id=CVE-2016-6713
25 Nov 2016 — A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-30822755. Una vulnerabilidad de denegación de servicio remota en Mediaserver en Android 6.x en versiones anteriores a 01-11-2016 y 7.0 en versiones anteriores a 01-11-2016 podría habilitar a un atacante a usar un... • http://www.securityfocus.com/bid/94137 • CWE-284: Improper Access Control •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-6728
https://notcve.org/view.php?id=CVE-2016-6728
25 Nov 2016 — An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30400942. Una vulnerabilidad de elevación de privilegio en el subsistema del kernel ION en Android en versiones anteriores a 05-11-... • http://www.securityfocus.com/bid/94202 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.6EPSS: 0%CPEs: 5EXPL: 0CVE-2016-6717 – Android Mitigation Bypass
https://notcve.org/view.php?id=CVE-2016-6717
25 Nov 2016 — An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability. Android ID: A-31350239. Una vulnerabilidad de elevación de privilegio en Mediaserver en Android 4.x en versiones anteriores a ... • http://www.securityfocus.com/bid/94178 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2016-6745
https://notcve.org/view.php?id=CVE-2016-6745
25 Nov 2016 — An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-31252388. Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil Synaptics en Android en versiones anteriores a 05-11-2016 podría habilitar a una aplicación maliciosa local ... • http://www.securityfocus.com/bid/94131 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6735
https://notcve.org/view.php?id=CVE-2016-6735
25 Nov 2016 — An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30907701. References: NVIDIA N-CVE-2016-6735. Una vulnerabilidad de elevación de privilegio en el controlador NVIDIA GPU en Android en... • http://www.securityfocus.com/bid/94140 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6742
https://notcve.org/view.php?id=CVE-2016-6742
25 Nov 2016 — An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30799828. Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil Synaptics en Android en versiones anteriores a 05-11-2016 podría habilitar a una aplicación maliciosa local ... • http://www.securityfocus.com/bid/94131 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6744
https://notcve.org/view.php?id=CVE-2016-6744
25 Nov 2016 — An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30970485. Una vulnerabilidad de elevación de privilegio en el controlador de pantalla táctil Synaptics en Android en versiones anteriores a 05-11-2016 podría habilitar a una aplicación maliciosa local ... • http://www.securityfocus.com/bid/94131 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6750
https://notcve.org/view.php?id=CVE-2016-6750
25 Nov 2016 — An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30312054. References: Qualcomm QC-CR#1052825. Una vulnerabilidad de divulgación de información en componentes Qualcomm incluidos el cont... • http://www.securityfocus.com/bid/94139 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2016-6725
https://notcve.org/view.php?id=CVE-2016-6725
25 Nov 2016 — A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Android ID: A-30515053. References: Qualcomm QC-CR#1050970. Una vulnerabilidad de ejecución de código remoto en el componente crypto Qualcomm en Android en versiones anteriores a 05-11-2016 podría habilitar a un at... • http://www.securityfocus.com/bid/94182 • CWE-284: Improper Access Control •