CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Android Kernel Binder Driver Out-of-Bounds Write Local Privilege Escalation (CVE-2020-0041)
[Affected Scope] Mobile devices and embedded systems running vulnerable Android Kernel versions
[Impact] A local attacker can perform an out-of-bounds write in kernel memory without any user interaction, leading to full local privilege escalation (LPE) to root
[Mitigation] Apply the Android March 2020 Security Bulletin updates or merge the corresponding upstream kernel patches
Android and Linux Kernel Binder Driver Use-After-Free Local Privilege Escalation (CVE-2019-2215)
[Affected Scope] Android OS and specific Linux kernel versions utilizing the Binder IPC driver (binder.c)
[Impact] Local attackers can execute malicious applications or chain with other vulnerabilities to gain root privileges and fully compromise the system
[Mitigation] Apply official security patches and upgrade the kernel to the latest secure version immediately