Page 34 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13311 | Medium | 6.7 | 2024-11-15 | In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escal… |
CVE-2017-13310 | High | 7.8 | 2024-11-15 | In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation… |
CVE-2017-13309 | Medium | 5.5 | 2024-11-15 | In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This could lead to local information disclosure… |
CVE-2017-13227 | Medium | 5.5 | 2024-11-14 | In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no ad… |
CVE-2024-43093 | High | 7.3 | 2024-11-13 | In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due… |
CVE-2024-43091 | Critical | 9.8 | 2024-11-13 | In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no a… |
CVE-2024-43090 | Medium | 5.0 | 2024-11-13 | In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User e… |
CVE-2024-43089 | High | 7.8 | 2024-11-13 | In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalat… |
CVE-2024-43088 | High | 7.8 | 2024-11-13 | In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a missi… |
CVE-2024-43087 | High | 7.8 | 2024-11-13 | In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility se… |
CVE-2024-43086 | Medium | 5.5 | 2024-11-13 | In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. T… |
CVE-2024-43085 | High | 7.8 | 2024-11-13 | In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in t… |
CVE-2024-43084 | Medium | 5.5 | 2024-11-13 | In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no ad… |
CVE-2024-43083 | Medium | 5.5 | 2024-11-13 | In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of ser… |
CVE-2024-43082 | Medium | 5.5 | 2024-11-13 | In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information d… |
CVE-2024-43081 | High | 7.8 | 2024-11-13 | In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead… |
CVE-2024-43080 | High | 7.8 | 2024-11-13 | In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of… |
CVE-2024-40671 | High | 7.8 | 2024-11-13 | In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This could lead… |
CVE-2024-40661 | High | 7.8 | 2024-11-13 | In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permission check. This co… |
CVE-2024-40660 | High | 7.8 | 2024-11-13 | In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead… |
CVE-2024-34747 | High | 7.8 | 2024-11-13 | In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2024-34729 | High | 7.8 | 2024-11-13 | In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the k… |
CVE-2024-34719 | High | 7.8 | 2024-11-13 | In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional… |
CVE-2024-31337 | High | 7.8 | 2024-11-13 | In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of priv… |
CVE-2024-23715 | High | 7.8 | 2024-11-13 | In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in t… |
CVE-2023-35686 | High | 7.8 | 2024-11-13 | In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of priv… |
CVE-2023-35659 | High | 7.8 | 2024-11-13 | In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalat… |
CVE-2024-11117 | Medium | 4.3 | 2024-11-12 | Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HT… |
CVE-2024-11116 | Medium | 4.3 | 2024-11-12 | Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures… |
CVE-2024-11115 | High | 8.8 | 2024-11-12 | Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a se… |
CVE-2024-11114 | High | 8.3 | 2024-11-12 | Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to… |
CVE-2024-11113 | High | 8.8 | 2024-11-12 | Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2024-11112 | High | 8.8 | 2024-11-12 | Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-11111 | Medium | 4.3 | 2024-11-12 | Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
CVE-2024-11110 | Medium | 6.5 | 2024-11-12 | Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Exte… |
CVE-2024-11026 | Low | 3.7 | 2024-11-08 | A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown function… |
CVE-2024-10668 | High | 7.5 | 2024-11-07 | There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the… |
CVE-2024-10827 | High | 8.8 | 2024-11-06 | Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-10826 | High | 8.8 | 2024-11-06 | Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a… |
CVE-2024-10389 | High | 7.5 | 2024-11-04 | There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Write Arbitrar… |
CVE-2024-20124 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20123 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20122 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20121 | Medium | 6.7 | 2024-11-04 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20120 | Medium | 6.7 | 2024-11-04 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20119 | Medium | 6.7 | 2024-11-04 | In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20118 | Medium | 6.7 | 2024-11-04 | In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20117 | Medium | 4.4 | 2024-11-04 | In vdec, there is a possible out of bounds read due to improper structure design. This could lead to local information disclosure with System execution privile… |
CVE-2024-20115 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20114 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20113 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20112 | Medium | 4.4 | 2024-11-04 | In isp, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges neede… |
CVE-2024-20111 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20110 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20109 | Medium | 6.7 | 2024-11-04 | In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20108 | Medium | 6.7 | 2024-11-04 | In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-20107 | Medium | 6.2 | 2024-11-04 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privi… |
CVE-2024-20106 | Medium | 6.7 | 2024-11-04 | In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2024-20104 | High | 8.4 | 2024-11-04 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pri… |
CVE-2024-10488 | High | 8.8 | 2024-10-29 | Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-10487 | High | 8.8 | 2024-10-29 | Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (… |
CVE-2024-47041 | High | 7.8 | 2024-10-25 | In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with n… |
CVE-2024-47035 | High | 7.8 | 2024-10-25 | In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic error in the code. This could lead to lo… |
CVE-2024-47034 | Medium | 5.5 | 2024-10-25 | there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges n… |
CVE-2024-47033 | High | 7.8 | 2024-10-25 | In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2024-47031 | High | 7.4 | 2024-10-25 | Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861. |
CVE-2024-47030 | Medium | 5.1 | 2024-10-25 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818. |
CVE-2024-47029 | Medium | 5.5 | 2024-10-25 | In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible out of bounds read due to an incorrect bo… |
CVE-2024-47028 | Medium | 4.4 | 2024-10-25 | In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System exec… |
CVE-2024-47027 | High | 7.8 | 2024-10-25 | In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation. This could lead to… |
CVE-2024-47026 | Medium | 5.5 | 2024-10-25 | In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with n… |
CVE-2024-47025 | Medium | 5.5 | 2024-10-25 | In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure w… |
CVE-2024-47024 | High | 7.8 | 2024-10-25 | In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an integer overflow. This could lead to local es… |
CVE-2024-47023 | High | 8.1 | 2024-10-25 | there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution p… |
CVE-2024-47022 | High | 7.5 | 2024-10-25 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656. |
CVE-2024-47021 | High | 7.5 | 2024-10-25 | In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2024-47020 | High | 7.5 | 2024-10-25 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488. |
CVE-2024-47019 | Medium | 5.5 | 2024-10-25 | In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2024-47018 | Medium | 5.5 | 2024-10-25 | In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclo… |
CVE-2024-47017 | High | 7.8 | 2024-10-25 | In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no… |
CVE-2024-47016 | High | 7.8 | 2024-10-25 | there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privil… |
CVE-2024-47015 | Medium | 5.5 | 2024-10-25 | In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could le… |
CVE-2024-47014 | High | 8.8 | 2024-10-25 | Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292. |
CVE-2024-47013 | High | 7.8 | 2024-10-25 | In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation of privil… |
CVE-2024-47012 | High | 7.8 | 2024-10-25 | In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escal… |
CVE-2024-44101 | High | 7.5 | 2024-10-25 | there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2024-44100 | High | 7.5 | 2024-10-25 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545. |
CVE-2024-44099 | Medium | 5.5 | 2024-10-25 | There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with no additional execu… |
CVE-2024-44098 | High | 7.4 | 2024-10-25 | In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of… |
CVE-2024-10231 | High | 8.8 | 2024-10-22 | Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-10230 | High | 8.8 | 2024-10-22 | Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-10229 | High | 8.1 | 2024-10-22 | Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Exte… |
CVE-2024-9858 | High | 7.8 | 2024-10-16 | There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was grea… |
CVE-2024-9966 | Medium | 5.3 | 2024-10-15 | Inappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass content security policy via a crafted H… |
CVE-2024-9965 | High | 8.8 | 2024-10-15 | Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2024-9964 | Medium | 4.3 | 2024-10-15 | Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestur… |
CVE-2024-9963 | Medium | 4.3 | 2024-10-15 | Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestu… |
CVE-2024-9962 | Medium | 4.3 | 2024-10-15 | Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI ges… |
CVE-2024-9961 | High | 8.8 | 2024-10-15 | Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gesture… |
CVE-2024-9960 | High | 7.5 | 2024-10-15 | Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |