2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21319 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosur... |
| CVE-2023-21318 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side cha... |
| CVE-2023-21317 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to s... |
| CVE-2023-21316 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side cha... |
| CVE-2023-21315 | MEDIUM | 6.5 | 0.1% | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/... |
| CVE-2023-21314 | MEDIUM | 4.4 | 0.1% | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information... |
| CVE-2023-21313 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could l... |
| CVE-2023-21312 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local informat... |
| CVE-2023-21311 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. ... |
| CVE-2023-21310 | MEDIUM | 6.7 | 0.1% | Oct 30, 2023 | In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation... |
| CVE-2023-21309 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d... |
| CVE-2023-21308 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation o... |
| CVE-2023-21307 | MEDIUM | 5 | 0.1% | Oct 30, 2023 | In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android devi... |
| CVE-2023-21306 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In ContentService, there is a possible way to read installed sync content providers due to side channel information disc... |
| CVE-2023-21305 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side cha... |
| CVE-2023-21304 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to ... |
| CVE-2023-21303 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side chan... |
| CVE-2023-21302 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to ... |
| CVE-2023-21301 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, ... |
| CVE-2023-21300 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to s... |
| CVE-2023-21299 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to ... |
| CVE-2023-21298 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This coul... |
| CVE-2023-21297 | MEDIUM | 4.4 | 0.1% | Oct 30, 2023 | In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to l... |
| CVE-2023-21296 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side ... |
| CVE-2023-21295 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now