2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40518 | HIGH | 7.5 | 0.5% | Aug 14, 2023 | LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers. |
| CVE-2023-35689 | HIGH | 7.8 | 0.1% | Aug 14, 2023 | In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion d... |
| CVE-2023-21292 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted fil... |
| CVE-2023-21290 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This co... |
| CVE-2023-21289 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could... |
| CVE-2023-21288 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission che... |
| CVE-2023-21287 | CRITICAL | 9.8 | 0.4% | Aug 14, 2023 | In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code executio... |
| CVE-2023-21286 | HIGH | 7.8 | 0.2% | Aug 14, 2023 | In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec... |
| CVE-2023-21285 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deput... |
| CVE-2023-21284 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device featur... |
| CVE-2023-21283 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deput... |
| CVE-2023-21282 | HIGH | 8.8 | 1.0% | Aug 14, 2023 | In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This cou... |
| CVE-2023-21281 | HIGH | 7.8 | 0.2% | Aug 14, 2023 | In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a lo... |
| CVE-2023-21280 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaust... |
| CVE-2023-21279 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to... |
| CVE-2023-21278 | LOW | 3.3 | 0.1% | Aug 14, 2023 | In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the c... |
| CVE-2023-21277 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission chec... |
| CVE-2023-21276 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could l... |
| CVE-2023-21275 | HIGH | 7.8 | 0.2% | Aug 14, 2023 | In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory ... |
| CVE-2023-21274 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th... |
| CVE-2023-21273 | HIGH | 8.8 | 0.2% | Aug 14, 2023 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l... |
| CVE-2023-21272 | HIGH | 7.8 | 0.2% | Aug 14, 2023 | In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead ... |
| CVE-2023-21271 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This c... |
| CVE-2023-21235 | HIGH | 7.8 | 0.1% | Aug 14, 2023 | In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing... |
| CVE-2023-21234 | MEDIUM | 5.5 | 0.1% | Aug 14, 2023 | In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options with... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now