cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2022-2390,https://securityvulnerability.io/vulnerability/CVE-2022-2390,Mutable pending intent in Google Play services SDK,"Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain the access to all non-exported providers and/or gain the access to other providers the victim has permissions. We recommend upgrading to version 18.0.2 of the Play Service SDK as well as rebuilding and redeploying apps.",Google,Play Services Sdk,6.1,MEDIUM,0.0004400000034365803,false,false,false,false,,false,false,2022-08-12T10:25:08.000Z,0 CVE-2022-1799,https://securityvulnerability.io/vulnerability/CVE-2022-1799,Incorrect signature verification on Google play-services-basement in Google Play SDK,Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.,Google,Google Play Services Sdk,5.7,MEDIUM,0.0010900000343099236,false,false,false,false,,false,false,2022-07-29T09:15:12.000Z,0 CVE-2014-7922,https://securityvulnerability.io/vulnerability/CVE-2014-7922,,"The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding _opt_ parameter in the Bundle extras argument, which allows attackers to bypass an intended consent dialog and retrieve tokens for arbitrary OAuth scopes including the SID and LSID scopes, and consequently obtain access to a Google account, via a crafted application, as demonstrated by setting the has_permission=1 parameter value upon finding _opt_has_permission in that argument.",Google,Play Services Sdk,,,0.0008800000068731606,false,false,false,false,,false,false,2015-02-23T02:00:00.000Z,0