CVE-2023-21139
https://notcve.org/view.php?id=CVE-2023-21139
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-276: Incorrect Default Permissions •
CVE-2021-0945
https://notcve.org/view.php?id=CVE-2021-0945
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-787: Out-of-bounds Write •
CVE-2023-24032
https://notcve.org/view.php?id=CVE-2023-24032
15 Jun 2023 — In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instance) can execute commands as root by passing one of JVM arguments, leading to local privilege escalation (LPE). En Zimbra Collaboration Suite a través de las versiones 9.0 y 8.8.15, un atacante (que tiene acceso de usuario inicial a una instancia de servidor Zimbra) puede ejecutar comandos como root pasando uno de los argumentos "JVM", lo que lleva a la escalada ... • https://wiki.zimbra.com/wiki/Security_Center • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVE-2023-21121
https://notcve.org/view.php?id=CVE-2023-21121
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-20: Improper Input Validation CWE-276: Incorrect Default Permissions •
CVE-2023-21124
https://notcve.org/view.php?id=CVE-2023-21124
15 Jun 2023 — In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-502: Deserialization of Untrusted Data •
CVE-2023-21138
https://notcve.org/view.php?id=CVE-2023-21138
15 Jun 2023 — This could lead to local escalation of privilege and background activity launches with User execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-20: Improper Input Validation CWE-276: Incorrect Default Permissions •
CVE-2023-21095
https://notcve.org/view.php?id=CVE-2023-21095
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVE-2023-21128
https://notcve.org/view.php?id=CVE-2023-21128
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-276: Incorrect Default Permissions •
CVE-2023-21120
https://notcve.org/view.php?id=CVE-2023-21120
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-416: Use After Free CWE-667: Improper Locking •
CVE-2023-21101
https://notcve.org/view.php?id=CVE-2023-21101
15 Jun 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-06-01 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-416: Use After Free •