2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40095 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due t... |
| CVE-2023-40094 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permiss... |
| CVE-2023-40092 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confu... |
| CVE-2023-40091 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead ... |
| CVE-2023-40090 | MEDIUM | 6.5 | 0.5% | Dec 4, 2023 | In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel info... |
| CVE-2023-40089 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credent... |
| CVE-2023-40088 | HIGH | 8.8 | 1.7% | Dec 4, 2023 | In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption du... |
| CVE-2023-40087 | HIGH | 8.8 | 0.2% | Dec 4, 2023 | In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds chec... |
| CVE-2023-40084 | HIGH | 7.8 | 0.2% | Dec 4, 2023 | In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local es... |
| CVE-2023-40083 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to ... |
| CVE-2023-40082 | CRITICAL | 9.8 | 0.6% | Dec 4, 2023 | In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. T... |
| CVE-2023-40081 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to ... |
| CVE-2023-40080 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This ... |
| CVE-2023-40079 | HIGH | 7.8 | 0.1% | Dec 4, 2023 | In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions b... |
| CVE-2023-40078 | CRITICAL | 9.8 | 0.5% | Dec 4, 2023 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to... |
| CVE-2023-40077 | HIGH | 8.1 | 8.4% | Dec 4, 2023 | In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to rem... |
| CVE-2023-40076 | MEDIUM | 5.5 | 2.3% | Dec 4, 2023 | In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due t... |
| CVE-2023-40075 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a mi... |
| CVE-2023-40074 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional... |
| CVE-2023-40073 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to ... |
| CVE-2023-35690 | CRITICAL | 9.8 | 0.4% | Dec 4, 2023 | In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This cou... |
| CVE-2023-35668 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy.... |
| CVE-2023-24052 | CRITICAL | 9.8 | 0.7% | Dec 4, 2023 | An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the chang... |
| CVE-2023-24051 | CRITICAL | 9.8 | 0.7% | Dec 4, 2023 | A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated pri... |
| CVE-2023-24050 | MEDIUM | 5.4 | 0.4% | Dec 4, 2023 | Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now