2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21395 | MEDIUM | 6.5 | 0.2% | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disc... |
| CVE-2023-21394 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a ... |
| CVE-2023-21393 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to lo... |
| CVE-2023-21392 | HIGH | 8.8 | 0.2% | Oct 30, 2023 | In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of ... |
| CVE-2023-21391 | HIGH | 7.5 | 0.4% | Oct 30, 2023 | In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could ... |
| CVE-2023-21390 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to l... |
| CVE-2023-21389 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead... |
| CVE-2023-21388 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalati... |
| CVE-2023-21387 | MEDIUM | 4.4 | 0.1% | Oct 30, 2023 | In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log inform... |
| CVE-2023-21385 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information di... |
| CVE-2023-21384 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to l... |
| CVE-2023-21383 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This coul... |
| CVE-2023-21382 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to... |
| CVE-2023-21381 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to ... |
| CVE-2023-21380 | MEDIUM | 6.7 | 0.1% | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation... |
| CVE-2023-21379 | MEDIUM | 4.4 | 0.1% | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information... |
| CVE-2023-21378 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check.... |
| CVE-2023-21377 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local informat... |
| CVE-2023-21376 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local i... |
| CVE-2023-21375 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of... |
| CVE-2023-21374 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to l... |
| CVE-2023-21373 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. Th... |
| CVE-2023-21372 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation... |
| CVE-2023-47090 | MEDIUM | 6.5 | 0.7% | Oct 30, 2023 | NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. An implicit $G user in an authoriz... |
| CVE-2023-36920 | MEDIUM | 6.1 | 0.3% | Oct 30, 2023 | In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now