Page 42 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48399 | Medium | 5.5 | 2023-12-08 | In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2023-48398 | High | 7.5 | 2023-12-08 | In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This c… |
CVE-2023-48397 | Medium | 4.9 | 2023-12-08 | In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |
CVE-2023-45866 | Medium | 6.3 | 2023-12-08 | Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboar… |
CVE-2023-6512 | Medium | 6.5 | 2023-12-06 | Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe… |
CVE-2023-6511 | Medium | 4.3 | 2023-12-06 | Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML p… |
CVE-2023-6510 | High | 8.8 | 2023-12-06 | Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
CVE-2023-6509 | High | 8.8 | 2023-12-06 | Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction… |
CVE-2023-6508 | High | 8.8 | 2023-12-06 | Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-42579 | Medium | 6.5 | 2023-12-05 | Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.5… |
CVE-2023-45781 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-45779 | High | 7.8 | 2023-12-04 | In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escal… |
CVE-2023-45777 | High | 7.8 | 2023-12-04 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel… |
CVE-2023-45776 | High | 7.8 | 2023-12-04 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-45775 | High | 7.8 | 2023-12-04 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-45774 | High | 7.8 | 2023-12-04 | In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. This could lead to local e… |
CVE-2023-45773 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2023-40103 | High | 7.8 | 2023-12-04 | In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-40098 | Medium | 5.5 | 2023-12-04 | In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This… |
CVE-2023-40097 | High | 7.8 | 2023-12-04 | In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation o… |
CVE-2023-40096 | High | 7.8 | 2023-12-04 | In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lea… |
CVE-2023-40095 | High | 7.8 | 2023-12-04 | In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to l… |
CVE-2023-40094 | High | 7.8 | 2023-12-04 | In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local esc… |
CVE-2023-40092 | Medium | 5.5 | 2023-12-04 | In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local in… |
CVE-2023-40091 | High | 7.8 | 2023-12-04 | In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with n… |
CVE-2023-40090 | Medium | 6.5 | 2023-12-04 | In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to… |
CVE-2023-40089 | High | 7.8 | 2023-12-04 | In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to… |
CVE-2023-40088 | High | 8.8 | 2023-12-04 | In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead… |
CVE-2023-40087 | High | 8.8 | 2023-12-04 | In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device esc… |
CVE-2023-40084 | High | 7.8 | 2023-12-04 | In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2023-40083 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-40082 | Critical | 9.8 | 2023-12-04 | In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of… |
CVE-2023-40081 | Medium | 5.5 | 2023-12-04 | In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could lead to l… |
CVE-2023-40080 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privi… |
CVE-2023-40079 | High | 7.8 | 2023-12-04 | In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalat… |
CVE-2023-40078 | Critical | 9.8 | 2023-12-04 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea… |
CVE-2023-40077 | High | 8.1 | 2023-12-04 | In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no add… |
CVE-2023-40076 | Medium | 5.5 | 2023-12-04 | In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead… |
CVE-2023-40075 | Medium | 5.5 | 2023-12-04 | In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to… |
CVE-2023-40074 | Medium | 5.5 | 2023-12-04 | In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User inte… |
CVE-2023-40073 | Medium | 5.5 | 2023-12-04 | In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no ad… |
CVE-2023-35690 | Critical | 9.8 | 2023-12-04 | In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privileg… |
CVE-2023-35668 | Medium | 5.5 | 2023-12-04 | In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information d… |
CVE-2023-21403 | Critical | 9.8 | 2023-12-04 | In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privile… |
CVE-2023-21402 | Critical | 9.8 | 2023-12-04 | In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in… |
CVE-2023-21401 | Critical | 9.8 | 2023-12-04 | In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv… |
CVE-2023-21263 | Critical | 9.8 | 2023-12-04 | In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in t… |
CVE-2023-21228 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat… |
CVE-2023-21227 | High | 7.5 | 2023-12-04 | In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in th… |
CVE-2023-21218 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat… |
CVE-2023-21217 | Critical | 9.8 | 2023-12-04 | In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no addi… |
CVE-2023-21216 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation… |
CVE-2023-21215 | Critical | 9.8 | 2023-12-04 | In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation o… |
CVE-2023-21166 | Critical | 9.8 | 2023-12-04 | In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in t… |
CVE-2023-21164 | Critical | 9.8 | 2023-12-04 | In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privileg… |
CVE-2023-21163 | Critical | 9.8 | 2023-12-04 | In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel… |
CVE-2023-21162 | Critical | 9.8 | 2023-12-04 | In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in… |
CVE-2023-6460 | Medium | 4.0 | 2023-12-04 | A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be loggi… |
CVE-2023-32870 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32869 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32868 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32867 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32866 | Medium | 6.7 | 2023-12-04 | In mmp, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32865 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2023-32864 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System executio… |
CVE-2023-32863 | Medium | 6.7 | 2023-12-04 | In display drm, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32862 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32861 | Medium | 6.7 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-32860 | Medium | 6.7 | 2023-12-04 | In display, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32859 | Medium | 6.7 | 2023-12-04 | In meta, there is a possible classic buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-32858 | Medium | 4.4 | 2023-12-04 | In GZ, there is a possible information disclosure due to a missing data erasing. This could lead to local information disclosure with System execution privileg… |
CVE-2023-32857 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32856 | Medium | 4.4 | 2023-12-04 | In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution priv… |
CVE-2023-32855 | Medium | 6.7 | 2023-12-04 | In aee, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32854 | Medium | 6.7 | 2023-12-04 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32853 | Medium | 6.7 | 2023-12-04 | In rpmb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32852 | Medium | 4.4 | 2023-12-04 | In cameraisp, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32851 | High | 7.8 | 2023-12-04 | In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… |
CVE-2023-32850 | High | 7.8 | 2023-12-04 | In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution p… |
CVE-2023-32849 | Medium | 6.7 | 2023-12-04 | In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32848 | Medium | 6.7 | 2023-12-04 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32847 | High | 7.8 | 2023-12-04 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-42751 | Medium | 4.4 | 2023-12-04 | In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2023-42749 | Medium | 5.5 | 2023-12-04 | In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local inform… |
CVE-2023-42748 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42747 | High | 7.8 | 2023-12-04 | In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42746 | High | 7.8 | 2023-12-04 | In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42745 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42744 | Medium | 5.5 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed |
CVE-2023-42743 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42742 | Medium | 5.5 | 2023-12-04 | In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed |
CVE-2023-42741 | Medium | 5.5 | 2023-12-04 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information… |
CVE-2023-42740 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation… |
CVE-2023-42739 | High | 7.8 | 2023-12-04 | In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escala… |
CVE-2023-42738 | High | 7.8 | 2023-12-04 | In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42737 | Medium | 5.5 | 2023-12-04 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information… |
CVE-2023-42736 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42735 | Medium | 4.4 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed |
CVE-2023-42734 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42733 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |