2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21001 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings... |
| CVE-2023-21000 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of pr... |
| CVE-2023-20995 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error i... |
| CVE-2023-20993 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception... |
| CVE-2023-20985 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input va... |
| CVE-2023-20976 | HIGH | 7.3 | 0.1% | Mar 24, 2023 | In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default a... |
| CVE-2023-20975 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CO... |
| CVE-2023-20971 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions withou... |
| CVE-2023-20966 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local... |
| CVE-2023-20964 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This ... |
| CVE-2023-20963 | HIGH | 7.8 | 1.4% | Mar 24, 2023 | In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional ... |
| CVE-2023-20960 | HIGH | 8.8 | 0.2% | Mar 24, 2023 | In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities ... |
| CVE-2023-20959 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks... |
| CVE-2023-20958 | HIGH | 7.1 | 0.1% | Mar 24, 2023 | In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loca... |
| CVE-2023-20957 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confuse... |
| CVE-2023-20955 | HIGH | 7.8 | 0.2% | Mar 24, 2023 | In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and unins... |
| CVE-2023-20953 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to inc... |
| CVE-2023-20947 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a... |
| CVE-2023-20936 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This cou... |
| CVE-2023-20931 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. Thi... |
| CVE-2023-20917 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the ... |
| CVE-2023-20911 | HIGH | 7.8 | 0.2% | Mar 24, 2023 | In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due t... |
| CVE-2023-20906 | HIGH | 7.8 | 0.1% | Mar 24, 2023 | In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after... |
| CVE-2023-28686 | HIGH | 7.1 | 0.7% | Mar 24, 2023 | Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via... |
| CVE-2023-28441 | HIGH | 7.5 | 0.4% | Mar 24, 2023 | smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will hav... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now