Access Control

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arb…CVE-2008-7298Android · 1.0% likely

   CWE-264

2. In the Bluetooth Low Energy (BLE) specification, there is a provided example Long Term Key (LTK). If a BLE device were to use this as a hardcoded LTK, it is theoretically possible…CVE-2019-2102Android · 0.3% likely

   CWE-264

3. The permissions on /proc/iomem were world-readable. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed…CVE-2019-2001Android · 0.2% likely

   CWE-732

4. In areNotificationsEnabledForPackage of NotificationManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to local escala…CVE-2019-2098Android · 0.2% likely

   CWE-862

5. In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalat…CVE-2019-2092Android · 0.2% likely

   CWE-862

6. In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local…CVE-2019-2091Android · 0.2% likely

   CWE-862

7. In updateAssistMenuItems of Editor.java, there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local escalation of privilege and F…CVE-2019-2026Android · 0.1% likely

   CWE-862

8. In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. This could lead to local escalation of p…CVE-2019-2090Android · 0.1% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.