Page 40 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22008 | High | 7.8 | 2024-03-11 | In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2024-22007 | Medium | 6.2 | 2024-03-11 | In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no add… |
CVE-2024-22006 | Medium | 5.3 | 2024-03-11 | OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device. |
CVE-2024-22005 | High | 8.4 | 2024-03-11 | there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2024-23717 | High | 8.8 | 2024-03-11 | In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead… |
CVE-2024-0053 | Low | 3.3 | 2024-03-11 | In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local inf… |
CVE-2024-0052 | Low | 3.3 | 2024-03-11 | In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local informat… |
CVE-2024-0051 | High | 7.8 | 2024-03-11 | In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with… |
CVE-2024-0050 | High | 7.8 | 2024-03-11 | In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-sec… |
CVE-2024-0049 | High | 7.8 | 2024-03-11 | In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addition… |
CVE-2024-0048 | High | 7.8 | 2024-03-11 | In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This… |
CVE-2024-0047 | Medium | 5.5 | 2024-03-11 | In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local deni… |
CVE-2024-0046 | High | 7.8 | 2024-03-11 | In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead… |
CVE-2024-0045 | Medium | 6.5 | 2024-03-11 | In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) infor… |
CVE-2024-0044 | Medium | 6.7 | 2024-03-11 | In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalat… |
CVE-2024-0039 | Critical | 9.8 | 2024-03-11 | In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2024-2176 | High | 8.8 | 2024-03-06 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-2174 | High | 8.8 | 2024-03-06 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-2173 | High | 8.8 | 2024-03-06 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML… |
CVE-2024-20840 | Medium | 5.7 | 2024-03-05 | Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers… |
CVE-2024-20839 | Medium | 4.6 | 2024-03-05 | Improper access control in Samsung Voice Recorder prior to versions 21.5.16.01 in Android 12 and Android 13, 21.4.51.02 in Android 14 allows physical attackers… |
CVE-2024-20038 | Low | 3.4 | 2024-03-04 | In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2024-20037 | Medium | 6.7 | 2024-03-04 | In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2024-20036 | Medium | 4.4 | 2024-03-04 | In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges ne… |
CVE-2024-20034 | High | 7.2 | 2024-03-04 | In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2024-20033 | Medium | 4.4 | 2024-03-04 | In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2024-20032 | Medium | 6.7 | 2024-03-04 | In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20031 | Medium | 6.7 | 2024-03-04 | In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2024-20030 | Medium | 4.4 | 2024-03-04 | In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privi… |
CVE-2024-20029 | High | 8.4 | 2024-03-04 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execut… |
CVE-2024-20028 | Medium | 6.6 | 2024-03-04 | In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges nee… |
CVE-2024-20027 | High | 7.9 | 2024-03-04 | In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20026 | Medium | 4.2 | 2024-03-04 | In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privi… |
CVE-2024-20025 | Medium | 6.7 | 2024-03-04 | In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2024-20024 | Medium | 6.0 | 2024-03-04 | In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20023 | Medium | 6.7 | 2024-03-04 | In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20022 | Medium | 6.7 | 2024-03-04 | In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20020 | Medium | 4.4 | 2024-03-04 | In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2024-20005 | High | 8.2 | 2024-03-04 | In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2024-1939 | High | 8.8 | 2024-02-29 | Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-1938 | High | 8.8 | 2024-02-29 | Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chrom… |
CVE-2023-52160 | Medium | 6.5 | 2024-02-22 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verif… |
CVE-2024-1676 | Medium | 5.4 | 2024-02-21 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chr… |
CVE-2024-1675 | High | 8.8 | 2024-02-21 | Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted H… |
CVE-2024-1674 | High | 8.8 | 2024-02-21 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HT… |
CVE-2024-1673 | High | 8.8 | 2024-02-21 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2024-1672 | Medium | 5.4 | 2024-02-21 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via… |
CVE-2024-1671 | Medium | 6.5 | 2024-02-21 | Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafte… |
CVE-2024-1670 | High | 8.8 | 2024-02-21 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2024-1669 | High | 8.8 | 2024-02-21 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… |
CVE-2024-0023 | High | 7.8 | 2024-02-16 | In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… |
CVE-2024-0021 | High | 7.8 | 2024-02-16 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification listener services due… |
CVE-2024-0020 | Medium | 5.5 | 2024-02-16 | In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. Th… |
CVE-2024-0019 | Medium | 5.0 | 2024-02-16 | In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check… |
CVE-2024-0018 | High | 7.8 | 2024-02-16 | In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio… |
CVE-2024-0017 | Medium | 5.5 | 2024-02-16 | In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosu… |
CVE-2024-0016 | Medium | 5.3 | 2024-02-16 | In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired device information disclosure with no ad… |
CVE-2024-0015 | High | 7.8 | 2024-02-16 | In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to… |
CVE-2023-40085 | Medium | 5.5 | 2024-02-16 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2023-21165 | High | 7.8 | 2024-02-16 | In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privil… |
CVE-2024-0041 | High | 7.0 | 2024-02-16 | In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local… |
CVE-2024-0040 | High | 7.5 | 2024-02-16 | In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with n… |
CVE-2024-0038 | High | 7.8 | 2024-02-16 | In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. Th… |
CVE-2024-0037 | Low | 3.3 | 2024-02-16 | In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission check. This could le… |
CVE-2024-0036 | High | 7.8 | 2024-02-16 | In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background… |
CVE-2024-0035 | High | 7.8 | 2024-02-16 | In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check. This could lead t… |
CVE-2024-0034 | High | 7.8 | 2024-02-16 | In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass. This could lead to local esca… |
CVE-2024-0033 | High | 7.8 | 2024-02-16 | In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead to local escalation of privilege with… |
CVE-2024-0032 | Medium | 6.5 | 2024-02-16 | In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation. This could lead to loca… |
CVE-2024-0031 | Critical | 9.8 | 2024-02-16 | In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation. This could lead to remote c… |
CVE-2024-0030 | Medium | 5.5 | 2024-02-16 | In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… |
CVE-2024-0029 | High | 7.8 | 2024-02-16 | In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to l… |
CVE-2024-0014 | High | 7.8 | 2024-02-16 | In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation o… |
CVE-2023-40122 | Low | 3.3 | 2024-02-16 | In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information di… |
CVE-2023-40093 | Medium | 5.5 | 2024-02-16 | In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local info… |
CVE-2023-40124 | Medium | 5.5 | 2024-02-15 | In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images… |
CVE-2023-40115 | High | 7.8 | 2024-02-15 | In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2023-40114 | High | 7.8 | 2024-02-15 | In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege w… |
CVE-2023-40113 | Medium | 5.5 | 2024-02-15 | In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local informati… |
CVE-2023-40112 | Medium | 5.5 | 2024-02-15 | In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print… |
CVE-2023-40111 | High | 7.8 | 2024-02-15 | In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy. Thi… |
CVE-2023-40110 | High | 7.8 | 2024-02-15 | In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege… |
CVE-2023-40109 | High | 7.8 | 2024-02-15 | In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escala… |
CVE-2023-40107 | High | 7.8 | 2024-02-15 | In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additio… |
CVE-2023-40106 | High | 7.8 | 2024-02-15 | In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to loca… |
CVE-2023-40105 | Medium | 5.5 | 2024-02-15 | In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to loca… |
CVE-2023-40104 | High | 7.5 | 2024-02-15 | In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information discl… |
CVE-2023-40100 | High | 7.8 | 2024-02-15 | In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege… |
CVE-2023-47131 | High | 7.5 | 2024-02-08 | The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file. |
CVE-2024-22012 | High | 7.8 | 2024-02-07 | there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2024-1284 | Critical | 9.8 | 2024-02-07 | Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-1283 | Critical | 9.8 | 2024-02-07 | Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-20016 | Medium | 4.4 | 2024-02-05 | In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service with System execution privileges needed… |
CVE-2024-20015 | High | 7.8 | 2024-02-05 | In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional exec… |
CVE-2024-20013 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2024-20012 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20011 | Critical | 9.8 | 2024-02-05 | In alac decoder, there is a possible information disclosure due to an incorrect bounds check. This could lead to remote code execution with no additional execu… |
CVE-2024-20010 | Medium | 6.7 | 2024-02-05 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privil… |
CVE-2024-20009 | High | 8.8 | 2024-02-05 | In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote escalation of privilege with no addition… |
CVE-2024-20007 | High | 7.5 | 2024-02-05 | In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution… |