https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:37:27.975717+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0209 certfr-2023-avi-0209 — De multiples vulnérabilités ont été découvertes dans Google Android. Elles permettent à un attaquant de provoquer une e… 2026-10-03T20:37:27.979641+00:00 certfr-2023-avi-0209 https://cve.radiocsirt.org/vuln/euvd-2026-220073 EUVD-2026-220073 2026-10-03T20:37:27.979676+00:00 EUVD-2026-220073 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20906 fkie_cve-2023-20906 2026-10-03T20:37:27.979691+00:00

In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a permissions bypass. This could lead to local escalation of privilege after updating an app to a higher Target SDK with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221040577

 https://cve.radiocsirt.org/vuln/ghsa-x8cp-27fq-25p8 GHSA-x8cp-27fq-25p8 2026-10-03T20:37:27.979719+00:00

In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a permissions bypass. This could lead to local escalation of privilege after updating an app to a higher Target SDK with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-221040577

 https://cve.radiocsirt.org/vuln/gsd-2023-20906 gsd-2023-20906 2026-10-03T20:37:27.979737+00:00 gsd-2023-20906 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0574 WID-SEC-W-2023-0574 — Android Patchday März 2023 2026-10-03T20:37:27.979748+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, Code auszuführen und einen Denial-of-Service-Zustand zu verursachen.