CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0623
https://notcve.org/view.php?id=CVE-2017-0623
12 May 2017 — An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32512358. • http://www.securityfocus.com/bid/98199 •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 3CVE-2016-10277 – Motorola Bootloader - Kernel Cmdline Injection Secure Boot and Device Locking Bypass
https://notcve.org/view.php?id=CVE-2016-10277
12 May 2017 — An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490. • https://www.exploit-db.com/exploits/42601 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0621
https://notcve.org/view.php?id=CVE-2017-0621
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35399703. • http://www.securityfocus.com/bid/98196 •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10285
https://notcve.org/view.php?id=CVE-2016-10285
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33752702. • http://www.securityfocus.com/bid/98163 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.6EPSS: 0%CPEs: 2EXPL: 0CVE-2017-0611
https://notcve.org/view.php?id=CVE-2017-0611
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393841. • http://www.securityfocus.com/bid/98177 • CWE-190: Integer Overflow or Wraparound •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10293
https://notcve.org/view.php?id=CVE-2016-10293
12 May 2017 — An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33352393. • http://www.securityfocus.com/bid/98206 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.6EPSS: 0%CPEs: 3EXPL: 0CVE-2017-0465
https://notcve.org/view.php?id=CVE-2017-0465
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34112914. • http://www.securityfocus.com/bid/98184 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-0607
https://notcve.org/view.php?id=CVE-2017-0607
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400551. • http://www.securityfocus.com/bid/98171 • CWE-704: Incorrect Type Conversion or Cast •
CVSS: 4.7EPSS: 0%CPEs: 2EXPL: 0CVE-2017-0633
https://notcve.org/view.php?id=CVE-2017-0633
12 May 2017 — An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-36000515. • http://www.securityfocus.com/bid/98223 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.6EPSS: 0%CPEs: 2EXPL: 0CVE-2017-0606
https://notcve.org/view.php?id=CVE-2017-0606
12 May 2017 — An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34088848. • http://www.securityfocus.com/bid/98168 •