Page 41 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20006 | Medium | 6.7 | 2024-02-05 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2024-20002 | Medium | 6.7 | 2024-02-05 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-20001 | Medium | 6.7 | 2024-02-05 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2024-1077 | High | 8.8 | 2024-01-30 | Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
CVE-2024-1060 | High | 8.8 | 2024-01-30 | Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-1059 | High | 8.8 | 2024-01-30 | Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML… |
CVE-2024-21382 | Medium | 4.3 | 2024-01-26 | Microsoft Edge for Android Information Disclosure Vulnerability |
CVE-2024-0814 | Medium | 6.5 | 2024-01-24 | Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (… |
CVE-2024-0813 | High | 8.8 | 2024-01-24 | Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2024-0812 | High | 8.8 | 2024-01-24 | Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a… |
CVE-2024-0811 | Medium | 4.3 | 2024-01-24 | Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extensio… |
CVE-2024-0810 | Medium | 4.3 | 2024-01-24 | Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension t… |
CVE-2024-0809 | Medium | 4.3 | 2024-01-24 | Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p… |
CVE-2024-0808 | Critical | 9.8 | 2024-01-24 | Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chro… |
CVE-2024-0807 | High | 8.8 | 2024-01-24 | Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-0806 | High | 8.8 | 2024-01-24 | Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interactio… |
CVE-2024-0805 | Medium | 4.3 | 2024-01-24 | Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain nam… |
CVE-2024-0804 | High | 7.5 | 2024-01-24 | Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HT… |
CVE-2023-48359 | Medium | 4.4 | 2024-01-18 | In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution… |
CVE-2023-48358 | Medium | 4.4 | 2024-01-18 | In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-48357 | Medium | 4.4 | 2024-01-18 | In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-48356 | Medium | 4.4 | 2024-01-18 | In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-48355 | Medium | 4.4 | 2024-01-18 | In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-48354 | Medium | 5.5 | 2024-01-18 | In telephone service, there is a possible improper input validation. This could lead to local information disclosure with no additional execution privileges ne… |
CVE-2023-48353 | Medium | 4.4 | 2024-01-18 | In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed |
CVE-2023-48352 | Medium | 5.5 | 2024-01-18 | In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execu… |
CVE-2023-48351 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-48350 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-48349 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-48348 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2023-48347 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48346 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution privileges needed |
CVE-2023-48345 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48344 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48343 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2023-48342 | Medium | 4.4 | 2024-01-18 | In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-48341 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execut… |
CVE-2023-48340 | Medium | 5.5 | 2024-01-18 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execu… |
CVE-2023-48339 | Medium | 4.4 | 2024-01-18 | In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed |
CVE-2024-0519 | High | 8.8 | 2024-01-16 | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-0518 | High | 8.8 | 2024-01-16 | Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2024-0517 | High | 8.8 | 2024-01-16 | Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2024-0333 | Medium | 5.3 | 2024-01-10 | Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious… |
CVE-2024-0225 | High | 8.8 | 2024-01-04 | Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2024-0224 | High | 8.8 | 2024-01-04 | Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2024-0223 | High | 8.8 | 2024-01-04 | Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2024-0222 | High | 8.8 | 2024-01-04 | Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap… |
CVE-2023-48418 | Critical | 10.0 | 2024-01-02 | In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value… |
CVE-2023-6339 | Critical | 10.0 | 2024-01-02 | Google Nest WiFi Pro root code-execution & user-data compromise |
CVE-2023-4164 | High | 8.4 | 2024-01-02 | There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional… |
CVE-2023-48419 | Critical | 10.0 | 2024-01-02 | An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege |
CVE-2023-32891 | Medium | 6.7 | 2024-01-02 | In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System ex… |
CVE-2023-32889 | High | 7.5 | 2024-01-02 | In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional exe… |
CVE-2023-32885 | Medium | 6.7 | 2024-01-02 | In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32884 | Medium | 6.7 | 2024-01-02 | In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System executi… |
CVE-2023-32883 | Medium | 6.7 | 2024-01-02 | In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2023-32882 | Medium | 6.7 | 2024-01-02 | In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32881 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privil… |
CVE-2023-32880 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-32879 | Medium | 6.7 | 2024-01-02 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-32878 | Medium | 4.4 | 2024-01-02 | In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-32877 | Medium | 6.7 | 2024-01-02 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-32876 | Medium | 4.4 | 2024-01-02 | In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-32875 | Medium | 4.4 | 2024-01-02 | In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-32872 | Medium | 6.7 | 2024-01-02 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-7024 | High | 8.8 | 2023-12-21 | Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-3742 | Medium | 6.8 | 2023-12-20 | Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restrictions via ph… |
CVE-2023-6870 | Medium | 4.3 | 2023-12-19 | Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. *This issue only affects… |
CVE-2023-6868 | Medium | 4.3 | 2023-12-19 | In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined one. This could allow… |
CVE-2023-6857 | Medium | 5.3 | 2023-12-19 | When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. *This bug only affects Firefox on Uni… |
CVE-2023-6707 | High | 8.8 | 2023-12-14 | Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2023-6706 | High | 8.8 | 2023-12-14 | Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potenti… |
CVE-2023-6705 | High | 8.8 | 2023-12-14 | Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-6704 | High | 8.8 | 2023-12-14 | Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (… |
CVE-2023-6703 | High | 8.8 | 2023-12-14 | Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-6702 | High | 8.8 | 2023-12-14 | Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-6181 | Critical | 9.8 | 2023-12-11 | An oversight in BCB handling of reboot reason that allows for persistent code execution |
CVE-2023-48425 | Critical | 9.8 | 2023-12-11 | U-Boot vulnerability resulting in persistent Code Execution |
CVE-2023-48424 | Critical | 9.8 | 2023-12-11 | U-Boot shell vulnerability resulting in Privilege escalation in a production device |
CVE-2023-48417 | Critical | 9.8 | 2023-12-11 | Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application |
CVE-2023-48423 | Critical | 9.8 | 2023-12-08 | In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… |
CVE-2023-48422 | Medium | 5.5 | 2023-12-08 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with n… |
CVE-2023-48421 | High | 7.8 | 2023-12-08 | In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possible out of bounds wri… |
CVE-2023-48420 | Medium | 6.4 | 2023-12-08 | there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User inte… |
CVE-2023-48416 | High | 7.5 | 2023-12-08 | In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional executi… |
CVE-2023-48415 | Medium | 5.5 | 2023-12-08 | In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-48414 | Medium | 6.7 | 2023-12-08 | In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System e… |
CVE-2023-48413 | Medium | 4.9 | 2023-12-08 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |
CVE-2023-48412 | Medium | 5.5 | 2023-12-08 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. This could lead to local information disc… |
CVE-2023-48411 | Medium | 5.5 | 2023-12-08 | In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could… |
CVE-2023-48410 | High | 7.5 | 2023-12-08 | In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no ad… |
CVE-2023-48409 | High | 7.8 | 2023-12-08 | In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due… |
CVE-2023-48408 | Medium | 5.5 | 2023-12-08 | In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local in… |
CVE-2023-48407 | High | 7.8 | 2023-12-08 | there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additio… |
CVE-2023-48406 | Medium | 6.7 | 2023-12-08 | there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of pri… |
CVE-2023-48405 | Medium | 6.7 | 2023-12-08 | there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of privilege with Syst… |
CVE-2023-48404 | High | 7.5 | 2023-12-08 | In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-48403 | High | 7.5 | 2023-12-08 | In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosu… |
CVE-2023-48402 | High | 7.8 | 2023-12-08 | In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-48401 | Medium | 5.5 | 2023-12-08 | In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information d… |