Page 32 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34730 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local esc… |
CVE-2023-40132 | High | 7.8 | 2025-01-21 | In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check… |
CVE-2023-40108 | Medium | 5.5 | 2025-01-21 | In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local in… |
CVE-2018-9464 | High | 7.8 | 2025-01-18 | In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2018-9461 | High | 7.0 | 2025-01-18 | In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead… |
CVE-2018-9406 | Medium | 5.5 | 2025-01-18 | In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2018-9405 | Medium | 6.7 | 2025-01-18 | In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2018-9401 | High | 7.8 | 2025-01-18 | In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privi… |
CVE-2018-9389 | High | 7.8 | 2025-01-18 | In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2018-9387 | High | 7.8 | 2025-01-18 | In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This could lead to local escalation of privil… |
CVE-2018-9447 | Medium | 5.5 | 2025-01-17 | In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null check. This could lead… |
CVE-2018-9434 | High | 7.8 | 2025-01-17 | In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege wit… |
CVE-2018-9384 | Medium | 4.4 | 2025-01-17 | In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execut… |
CVE-2018-9383 | Medium | 4.4 | 2025-01-17 | In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi… |
CVE-2018-9382 | High | 7.8 | 2025-01-17 | In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. Th… |
CVE-2018-9379 | Medium | 5.5 | 2025-01-17 | In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to loca… |
CVE-2018-9375 | High | 7.8 | 2025-01-17 | In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This cou… |
CVE-2017-13322 | Medium | 5.5 | 2025-01-17 | In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This c… |
CVE-2025-0448 | Medium | 4.3 | 2025-01-15 | Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (… |
CVE-2025-0447 | High | 8.8 | 2025-01-15 | Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML… |
CVE-2025-0446 | Medium | 4.3 | 2025-01-15 | Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gest… |
CVE-2025-0443 | High | 8.8 | 2025-01-15 | Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gest… |
CVE-2025-0442 | Medium | 6.5 | 2025-01-15 | Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
CVE-2025-0441 | Medium | 6.5 | 2025-01-15 | Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information fro… |
CVE-2025-0440 | Medium | 6.5 | 2025-01-15 | Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HT… |
CVE-2025-0439 | Medium | 6.5 | 2025-01-15 | Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing… |
CVE-2025-0438 | High | 8.8 | 2025-01-15 | Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML p… |
CVE-2025-0437 | High | 8.8 | 2025-01-15 | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2025-0436 | High | 8.8 | 2025-01-15 | Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2025-0435 | Medium | 6.5 | 2025-01-15 | Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HT… |
CVE-2025-0434 | High | 8.8 | 2025-01-15 | Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2025-0291 | High | 8.8 | 2025-01-08 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2023-35685 | High | 7.8 | 2025-01-08 | In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This could lead to local escalation of priv… |
CVE-2025-0246 | Medium | 6.5 | 2025-01-07 | When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating sys… |
CVE-2024-20153 | High | 7.5 | 2025-01-06 | In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no addition… |
CVE-2024-20152 | Medium | 4.4 | 2025-01-06 | In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor… |
CVE-2024-20148 | Critical | 9.8 | 2025-01-06 | In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no… |
CVE-2024-20146 | High | 8.1 | 2025-01-06 | In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with… |
CVE-2024-20145 | Medium | 6.6 | 2025-01-06 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20144 | Medium | 6.6 | 2025-01-06 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20143 | Medium | 6.6 | 2025-01-06 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20140 | Medium | 6.7 | 2025-01-06 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2024-20105 | Medium | 6.7 | 2025-01-06 | In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2024-53842 | Critical | 9.8 | 2025-01-03 | In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… |
CVE-2024-53841 | High | 7.8 | 2025-01-03 | In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead to local escalation of privilege with n… |
CVE-2024-53840 | High | 7.8 | 2025-01-03 | there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges nee… |
CVE-2024-53839 | Medium | 5.5 | 2025-01-03 | In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2024-53838 | High | 7.8 | 2025-01-03 | In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could le… |
CVE-2024-53837 | High | 7.8 | 2025-01-03 | In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege… |
CVE-2024-53836 | Medium | 6.7 | 2025-01-03 | In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privil… |
CVE-2024-53835 | High | 7.8 | 2025-01-03 | there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges nee… |
CVE-2024-53834 | High | 7.5 | 2025-01-03 | In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote inf… |
CVE-2024-53833 | High | 7.8 | 2025-01-03 | In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalatio… |
CVE-2024-47032 | High | 7.8 | 2025-01-03 | In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation o… |
CVE-2024-11624 | High | 7.8 | 2025-01-03 | there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution priv… |
CVE-2024-43769 | High | 7.8 | 2025-01-03 | In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in… |
CVE-2024-43768 | High | 7.8 | 2025-01-03 | In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with… |
CVE-2024-43767 | High | 8.8 | 2025-01-03 | In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input validation. This could lead to remote code ex… |
CVE-2024-43764 | High | 7.8 | 2025-01-03 | In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could lead to local escalation of privilege wi… |
CVE-2024-43762 | High | 7.8 | 2025-01-03 | In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in the code. This could lead to local escal… |
CVE-2024-43097 | High | 7.8 | 2025-01-03 | In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2024-43077 | High | 7.8 | 2025-01-03 | In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privile… |
CVE-2024-53647 | Medium | 6.5 | 2024-12-31 | Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification requests… |
CVE-2024-12695 | High | 8.8 | 2024-12-18 | Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page… |
CVE-2024-12694 | High | 8.8 | 2024-12-18 | Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-12693 | High | 8.8 | 2024-12-18 | Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H… |
CVE-2024-12692 | High | 8.8 | 2024-12-18 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-47040 | High | 7.8 | 2024-12-18 | There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User… |
CVE-2024-47039 | Medium | 5.5 | 2024-12-18 | In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… |
CVE-2024-47038 | High | 7.8 | 2024-12-18 | In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check. This could lead to localcescalation… |
CVE-2024-11358 | Medium | 5.7 | 2024-12-16 | Mattermost Android Mobile Apps versions <=2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file… |
CVE-2024-54317 | Medium | 6.5 | 2024-12-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Google Web Stories web-stories allows Stored XSS.This iss… |
CVE-2024-12382 | High | 8.8 | 2024-12-12 | Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-12381 | High | 8.8 | 2024-12-12 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-12236 | Medium | 5.5 | 2024-12-10 | A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible… |
CVE-2018-9391 | Medium | 6.7 | 2024-12-05 | In update_gps_sv and output_vzw_debug of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor ker.c, there is a possible out of… |
CVE-2018-9390 | Medium | 6.7 | 2024-12-05 | In procfile_write of gl_proc.c, there is a possible out of bounds read of a function pointer due to an incorrect bounds check. This could lead to local … |
CVE-2018-9388 | Critical | 9.8 | 2024-12-05 | In store_upgrade and store_cmd of drivers/input/touchscreen/stm/ftm4_pdc.c, there are out of bound writes due to missing bounds checks or integer underflows. T… |
CVE-2018-9386 | Medium | 6.7 | 2024-12-05 | In reboot_block_command of htc reboot_block driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local e… |
CVE-2017-13308 | Medium | 6.7 | 2024-12-05 | In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to improper input validation. This could le… |
CVE-2018-9463 | Medium | 6.7 | 2024-12-05 | In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to lo… |
CVE-2018-9462 | Medium | 6.7 | 2024-12-05 | In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege … |
CVE-2018-9439 | Medium | 6.7 | 2024-12-05 | In __unregister_prot_hook and packet_release of af_packet.c, there is a possible use-after-free due to improper locking. This could lead to local escal… |
CVE-2018-9416 | Medium | 6.7 | 2024-12-05 | In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to an unusual root cause. This could lead to local escalation of privilege with … |
CVE-2018-9408 | Medium | 4.4 | 2024-12-05 | In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to a local inform… |
CVE-2018-9407 | Medium | 5.5 | 2024-12-05 | In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data. |
CVE-2018-9404 | Medium | 6.7 | 2024-12-05 | In oemCallback of ril.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Sy… |
CVE-2018-9403 | Medium | 6.7 | 2024-12-05 | In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_- interface.c, there is a possible stack buffer overflow due to a missing bounds check… |
CVE-2018-9402 | High | 7.8 | 2024-12-05 | In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel. |
CVE-2018-9400 | Medium | 6.7 | 2024-12-05 | In gt1x_debug_write_proc and gt1x_tool_write of drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c, there is a possible out of b… |
CVE-2018-9399 | Medium | 6.7 | 2024-12-05 | In /proc/driver/wmt_dbg driver, there are several possible out of bounds writes. These could lead to local escalation of privilege with System executio… |
CVE-2018-9398 | Medium | 6.7 | 2024-12-05 | In fm_set_stat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of priv… |
CVE-2018-9397 | Medium | 6.7 | 2024-12-05 | In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2018-9396 | Medium | 6.7 | 2024-12-04 | In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. Th… |
CVE-2018-9395 | Medium | 6.7 | 2024-12-04 | In mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c, there i… |
CVE-2018-9394 | Medium | 6.7 | 2024-12-04 | In mtk_p2p_wext_set_key of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_p2p.c, there is a possible OOB write due to improper input validation. This… |
CVE-2018-9393 | Medium | 6.7 | 2024-12-04 | In procfile_write of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c, there is a possible OOB write due to a missing bounds check. This could l… |
CVE-2018-9392 | Medium | 6.7 | 2024-12-04 | In get_binary of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, there is a possible out of bounds write due to a missing bound… |
CVE-2024-12053 | High | 8.8 | 2024-12-03 | Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chro… |
CVE-2024-49421 | Medium | 4.3 | 2024-12-03 | Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to… |