Page 517 of 10623 results (0.048 seconds)

CVSS: 3.3EPSS: 0%CPEs: 67EXPL: 0

In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-862: Missing Authorization •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

This could lead to local information disclosure with no additional execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-05-01 • CWE-276: Incorrect Default Permissions •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

This could lead to local information disclosure with no additional execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-20: Improper Input Validation •

CVSS: 4.4EPSS: 0%CPEs: 54EXPL: 0

This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-20: Improper Input Validation •