Page 44 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43477 | Low | 3.3 | 2023-11-14 | Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2023-5996 | High | 8.8 | 2023-11-08 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2023-32839 | Medium | 6.7 | 2023-11-06 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32838 | Medium | 6.7 | 2023-11-06 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution p… |
CVE-2023-32837 | High | 7.8 | 2023-11-06 | In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-32836 | Medium | 6.7 | 2023-11-06 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-32835 | Medium | 6.7 | 2023-11-06 | In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32834 | Medium | 6.7 | 2023-11-06 | In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-32832 | High | 7.0 | 2023-11-06 | In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileg… |
CVE-2023-32825 | Medium | 5.5 | 2023-11-06 | In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additi… |
CVE-2023-32818 | Medium | 6.7 | 2023-11-06 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-5859 | Medium | 4.3 | 2023-11-01 | Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local H… |
CVE-2023-5858 | Medium | 4.3 | 2023-11-01 | Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML… |
CVE-2023-5857 | High | 8.8 | 2023-11-01 | Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malici… |
CVE-2023-5856 | High | 8.8 | 2023-11-01 | Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten… |
CVE-2023-5855 | High | 8.8 | 2023-11-01 | Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… |
CVE-2023-5854 | High | 8.8 | 2023-11-01 | Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
CVE-2023-5853 | Medium | 4.3 | 2023-11-01 | Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromi… |
CVE-2023-5852 | High | 8.8 | 2023-11-01 | Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti… |
CVE-2023-5851 | Medium | 4.3 | 2023-11-01 | Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page… |
CVE-2023-5850 | Medium | 4.3 | 2023-11-01 | Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Ch… |
CVE-2023-5849 | High | 8.8 | 2023-11-01 | Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-5482 | High | 8.8 | 2023-11-01 | Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… |
CVE-2023-5480 | Medium | 6.1 | 2023-11-01 | Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Ch… |
CVE-2023-42750 | Medium | 4.4 | 2023-11-01 | In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2023-42655 | Medium | 6.7 | 2023-11-01 | In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of p… |
CVE-2023-42654 | Medium | 5.5 | 2023-11-01 | In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42653 | Medium | 5.5 | 2023-11-01 | In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executi… |
CVE-2023-42652 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42651 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42650 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42649 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42648 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42647 | Medium | 5.5 | 2023-11-01 | In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information di… |
CVE-2023-42646 | Medium | 5.5 | 2023-11-01 | In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42645 | Medium | 5.5 | 2023-11-01 | In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information dis… |
CVE-2023-42644 | Medium | 5.5 | 2023-11-01 | In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42643 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42642 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42641 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42640 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42639 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42638 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42637 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42636 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42635 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42634 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42633 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42632 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42631 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2022-48461 | Medium | 4.4 | 2023-11-01 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48460 | Medium | 5.5 | 2023-11-01 | In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execu… |
CVE-2022-48459 | Medium | 5.5 | 2023-11-01 | In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution priv… |
CVE-2022-48458 | Medium | 5.5 | 2023-11-01 | In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution priv… |
CVE-2022-48457 | Medium | 5.5 | 2023-11-01 | In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution priv… |
CVE-2022-48456 | Medium | 4.4 | 2023-11-01 | In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution pri… |
CVE-2022-48455 | Medium | 5.5 | 2023-11-01 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2022-48454 | Medium | 5.5 | 2023-11-01 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2023-45780 | High | 7.3 | 2023-10-30 | In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no add… |
CVE-2023-40101 | Medium | 5.5 | 2023-10-30 | In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2023-21398 | High | 7.8 | 2023-10-30 | In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to local escalation of privilege with no a… |
CVE-2023-21397 | High | 7.8 | 2023-10-30 | In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to local escalation of privilege with no addi… |
CVE-2023-21396 | High | 7.8 | 2023-10-30 | In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with Use… |
CVE-2023-21395 | Medium | 6.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over Bluetooth with no additiona… |
CVE-2023-21394 | Medium | 5.5 | 2023-10-30 | In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission check. This could le… |
CVE-2023-21393 | High | 7.8 | 2023-10-30 | In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to local escalation of privilege with no add… |
CVE-2023-21392 | High | 8.8 | 2023-10-30 | In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege when connecting to a Bluetoot… |
CVE-2023-21391 | High | 7.5 | 2023-10-30 | In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could lead to remote denial of service with n… |
CVE-2023-21390 | High | 7.8 | 2023-10-30 | In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to local escalation of privilege with no ad… |
CVE-2023-21389 | High | 7.8 | 2023-10-30 | In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2023-21388 | High | 7.8 | 2023-10-30 | In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-21387 | Medium | 4.4 | 2023-10-30 | In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. This could lead to lo… |
CVE-2023-21385 | Medium | 5.5 | 2023-10-30 | In Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution p… |
CVE-2023-21384 | Medium | 5.5 | 2023-10-30 | In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User e… |
CVE-2023-21383 | Medium | 5.5 | 2023-10-30 | In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. This could lead to local information disclosure… |
CVE-2023-21382 | Medium | 5.5 | 2023-10-30 | In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permission check. This could… |
CVE-2023-21381 | High | 7.8 | 2023-10-30 | In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no a… |
CVE-2023-21380 | Medium | 6.7 | 2023-10-30 | In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-21379 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server wit… |
CVE-2023-21378 | High | 7.8 | 2023-10-30 | In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check. This could lead to local escalation of… |
CVE-2023-21377 | Medium | 5.5 | 2023-10-30 | In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. This could lead to local information disclosure with no additional execu… |
CVE-2023-21376 | Medium | 5.5 | 2023-10-30 | In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. This could lead to local information disclosure with no additiona… |
CVE-2023-21375 | High | 7.8 | 2023-10-30 | In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional execution… |
CVE-2023-21374 | High | 7.8 | 2023-10-30 | In System UI, there is a possible factory reset protection bypass due to a logic error in the code. This could lead to local escalation of privilege with no ad… |
CVE-2023-21373 | High | 7.8 | 2023-10-30 | In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of pr… |
CVE-2023-21372 | High | 7.8 | 2023-10-30 | In libdexfile, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execut… |
CVE-2023-21371 | Medium | 6.7 | 2023-10-30 | In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution p… |
CVE-2023-21370 | Medium | 6.7 | 2023-10-30 | In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System e… |
CVE-2023-21369 | Medium | 5.5 | 2023-10-30 | In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissions bypass. This could lead to local den… |
CVE-2023-21368 | Medium | 5.5 | 2023-10-30 | In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-21367 | Medium | 5.5 | 2023-10-30 | In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. This could lead to local information… |
CVE-2023-21366 | Medium | 5.5 | 2023-10-30 | In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. This could lead to local informati… |
CVE-2023-21365 | Medium | 5.5 | 2023-10-30 | In Contacts, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service in the Phone app with User execution privile… |
CVE-2023-21364 | Medium | 5.5 | 2023-10-30 | In ContactsProvider, there is a possible crash loop due to resource exhaustion. This could lead to local persistent denial of service in the Phone app with Use… |
CVE-2023-21362 | Medium | 5.5 | 2023-10-30 | In Usage, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges need… |
CVE-2023-21361 | High | 8.8 | 2023-10-30 | In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Blue… |
CVE-2023-21360 | Medium | 6.7 | 2023-10-30 | In Bluetooth, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution… |
CVE-2023-21359 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server wit… |
CVE-2023-21358 | High | 7.8 | 2023-10-30 | In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to improperly used crypto. This could lead… |
CVE-2023-21357 | Medium | 4.4 | 2023-10-30 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |