{"vulnerability": "cve-2024-4065", "sightings": [{"uuid": "658c6586-22fd-4388-bcee-c7fb038df12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907642483169674", "content": "", "creation_timestamp": "2025-01-28T19:31:31.088411Z"}, {"uuid": "5a670585-cb63-47fa-8ab8-40adea6522fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbik25oc2t", "content": "", "creation_timestamp": "2025-01-28T20:16:09.315720Z"}, {"uuid": "ea6b1496-f6d1-4e38-b963-1cbe4d8f4908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418987577872", "content": "", "creation_timestamp": "2025-01-28T22:48:58.773124Z"}, {"uuid": "99cffba2-4959-4d55-8cf3-468d47b42a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113910350013612910", "content": "", "creation_timestamp": "2025-01-29T07:00:03.313204Z"}, {"uuid": "8328ba92-e733-4cff-bff8-c093900dbf28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40651", "type": "seen", "source": "https://t.me/cvedetector/16640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40651 - \u250c Linux Kernel Use-After-Free Vulnerability in TBD\", \n  \"Content\": \"CVE ID : CVE-2024-40651 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:28.000000Z"}, {"uuid": "a991bdb4-a4a1-4697-9bcf-0849414befba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40655", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7990", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40655\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.\n\ud83d\udccf Published: 2024-09-11T00:09:18.166Z\n\ud83d\udccf Modified: 2025-03-18T20:42:47.617Z\n\ud83d\udd17 References:\n1. https://android.googlesource.com/platform/packages/services/Telecomm/+/eeef54b37a362f506ea3aa155baddc545b6a909a\n2. https://source.android.com/security/bulletin/2024-09-01", "creation_timestamp": "2025-03-18T20:48:07.000000Z"}, {"uuid": "4b62b380-431b-45c6-b8c8-655d946e8f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-40653", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3", "content": "", "creation_timestamp": "2025-07-30T07:59:24.597474Z"}, {"uuid": "80911ee3-9a6d-4d02-bd60-76fb12abac08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40650", "type": "seen", "source": "https://t.me/cvedetector/5323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40650 - \"Google WiFi FRP Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40650 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:59.000000Z"}, {"uuid": "9a59afd3-bc91-4ade-b6de-1b08b493fedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40659", "type": "seen", "source": "https://t.me/cvedetector/5317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40659 - AndroidKeyStore Local DoS Vulnerability in RemoteProvisioningService\", \n  \"Content\": \"CVE ID : CVE-2024-40659 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:51.000000Z"}, {"uuid": "5f634336-cbf4-4a79-84c3-fc8d2c277ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40654", "type": "seen", "source": "https://t.me/cvedetector/5315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40654 - Google Chrome Privilege Escalation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-40654 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:50.000000Z"}, {"uuid": "260d6cdd-4a46-45ec-a3c3-9971a1cec71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40652", "type": "seen", "source": "https://t.me/cvedetector/5321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40652 - HP Settings Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-40652 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:57.000000Z"}, {"uuid": "b10af905-1c74-4a67-b26d-08f1dada687f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40656", "type": "seen", "source": "https://t.me/cvedetector/5316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40656 - Apache Conference Server Image Inference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40656 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:51.000000Z"}, {"uuid": "ef65e6da-b0fe-464e-abd4-b9a9cdeb67d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40655", "type": "seen", "source": "https://t.me/cvedetector/5320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40655 - Google Android Service Permission Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40655 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:57.000000Z"}, {"uuid": "ce58f168-620e-4dc3-8009-97d9c831107d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40658", "type": "seen", "source": "https://t.me/cvedetector/5319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40658 - Rapid_io_open_intel camera\u591a\u3044 hepatitis\", \n  \"Content\": \"CVE ID : CVE-2024-40658 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:53.000000Z"}, {"uuid": "85317ce9-01ea-421d-895e-2a4cd753942c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40657", "type": "seen", "source": "https://t.me/cvedetector/5318", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40657 - \"Atlassian AccountType Preference Loading Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-40657 \nPublished : Sept. 11, 2024, 12:15 a.m. | 30\u00a0minutes ago \nDescription : In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T02:47:52.000000Z"}]}