Google Inc.
Page 9 of 10 — Google Inc. CVEs from a corpus of 960, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0388 | Medium | 5.5 | 2017-01-12 | An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inse… |
CVE-2017-0387 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged… |
CVE-2017-0386 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privi… |
CVE-2017-0385 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged… |
CVE-2017-0384 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to execu… |
CVE-2017-0383 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a priv… |
CVE-2017-0382 | High | 7.8 | 2017-01-12 | A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the con… |
CVE-2017-0381 | High | 7.8 | 2017-01-12 | An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of… |
CVE-2016-8475 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels. Thi… |
CVE-2016-8474 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8473 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8472 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8471 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8470 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8469 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This i… |
CVE-2016-8468 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged proce… |
CVE-2016-8465 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8464 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8463 | Medium | 5.5 | 2017-01-12 | A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reb… |
CVE-2016-8462 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8460 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8459 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. V… |
CVE-2016-8458 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8457 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8456 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8455 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8453 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8452 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8451 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8450 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8449 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8448 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8447 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8446 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8445 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8444 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-8443 | High | 7.8 | 2017-01-12 | Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.1… |
CVE-2016-8442 | High | 7.8 | 2017-01-12 | Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android. Ver… |
CVE-2016-8441 | High | 7.8 | 2017-01-12 | Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Andr… |
CVE-2016-8440 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android… |
CVE-2016-8439 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3… |
CVE-2016-8438 | Critical | 9.8 | 2017-01-12 | Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loa… |
CVE-2016-8437 | Critical | 9.8 | 2017-01-12 | Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18. And… |
CVE-2016-8436 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8435 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8434 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8433 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-8432 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8431 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8430 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8429 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8428 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8427 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8426 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8425 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8423 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8422 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8415 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8412 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-8398 | Critical | 9.8 | 2017-01-12 | Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Ker… |
CVE-2016-8410 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8409 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8408 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8407 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8406 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8405 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8403 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8402 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8401 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8400 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permissi… |
CVE-2016-8399 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the cont… |
CVE-2016-8397 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8396 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8395 | Medium | 4.7 | 2017-01-12 | A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashi… |
CVE-2016-8394 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8393 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8392 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8391 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-6791 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-6789 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the… |
CVE-2016-6788 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-6785 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6783 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6782 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6781 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6780 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2016-6778 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2016-6777 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6776 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6775 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6774 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate appli… |
CVE-2016-6773 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permissio… |
CVE-2016-6772 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged proces… |
CVE-2016-6771 | Medium | 5.3 | 2017-01-12 | An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue… |
CVE-2016-6770 | Low | 3.3 | 2017-01-12 | An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. Thi… |
CVE-2016-6769 | Medium | 4.6 | 2017-01-12 | An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. This issue is rated as M… |
CVE-2016-6768 | High | 7.8 | 2017-01-12 | A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the con… |
CVE-2016-6767 | Medium | 5.5 | 2017-01-12 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2016-6766 | Medium | 5.5 | 2017-01-12 | A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang… |
CVE-2016-6765 | Medium | 5.5 | 2017-01-12 | A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. T… |