https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:33:40.500218+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1084 certfr-2022-avi-1084 — De multiples vulnérabilités ont été découvertes dans Google Android. Elles permettent à un attaquant de provoquer une e… 2026-10-02T21:33:40.506391+00:00 certfr-2022-avi-1084 https://cve.radiocsirt.org/vuln/cnvd-2022-61747 cnvd-2022-61747 2026-10-02T21:33:40.506429+00:00 cnvd-2022-61747 https://cve.radiocsirt.org/vuln/euvd-2026-12983 EUVD-2026-12983 2026-10-02T21:33:40.506444+00:00 EUVD-2026-12983 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20144 fkie_cve-2022-20144 2026-10-02T21:33:40.506455+00:00

In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-250637906

 https://cve.radiocsirt.org/vuln/ghsa-38x6-39xc-4cpv GHSA-38x6-39xc-4cpv 2026-10-02T21:33:40.506481+00:00

In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-187702830

 https://cve.radiocsirt.org/vuln/gsd-2022-20144 gsd-2022-20144 2026-10-02T21:33:40.506497+00:00 gsd-2022-20144 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0137 WID-SEC-W-2022-0137 — Android Patchday Juni 2022 2026-10-02T21:33:40.506507+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und einen Denial-of-Service-Zustand auszulösen.