Page 45 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21356 | High | 8.8 | 2023-10-30 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no addit… |
CVE-2023-21355 | High | 7.8 | 2023-10-30 | In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional executi… |
CVE-2023-21354 | Medium | 5.5 | 2023-10-30 | In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2023-21353 | High | 7.5 | 2023-10-30 | In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution pri… |
CVE-2023-21352 | Medium | 5.5 | 2023-10-30 | In NFA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2023-21351 | High | 7.8 | 2023-10-30 | In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2023-21350 | Medium | 5.5 | 2023-10-30 | In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2023-21349 | Low | 3.3 | 2023-10-30 | In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2023-21348 | Low | 3.3 | 2023-10-30 | In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2023-21347 | High | 7.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2023-21346 | Low | 3.3 | 2023-10-30 | In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis… |
CVE-2023-21345 | Low | 3.3 | 2023-10-30 | In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosur… |
CVE-2023-21344 | Medium | 5.5 | 2023-10-30 | In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2023-21343 | High | 7.8 | 2023-10-30 | In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no add… |
CVE-2023-21342 | High | 7.8 | 2023-10-30 | In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background due to a logic erro… |
CVE-2023-21341 | High | 7.8 | 2023-10-30 | In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. This could lead to local escalation of privile… |
CVE-2023-21340 | Medium | 5.5 | 2023-10-30 | In Telecomm, there is a possible way to get the call state due to a missing permission check. This could lead to local information disclosure with no additiona… |
CVE-2023-21339 | High | 7.5 | 2023-10-30 | In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of service with… |
CVE-2023-21338 | Medium | 5.5 | 2023-10-30 | In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2023-21337 | High | 7.8 | 2023-10-30 | In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This c… |
CVE-2023-21336 | Medium | 5.5 | 2023-10-30 | In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2023-21335 | Medium | 5.5 | 2023-10-30 | In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This coul… |
CVE-2023-21334 | Medium | 5.5 | 2023-10-30 | In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local informati… |
CVE-2023-21333 | Medium | 5.5 | 2023-10-30 | In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2023-21332 | Medium | 5.5 | 2023-10-30 | In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This… |
CVE-2023-21331 | Medium | 5.5 | 2023-10-30 | In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This c… |
CVE-2023-21330 | Medium | 5.5 | 2023-10-30 | In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2023-21329 | Medium | 5.5 | 2023-10-30 | In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local information d… |
CVE-2023-21328 | High | 7.8 | 2023-10-30 | In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This coul… |
CVE-2023-21327 | Medium | 5.5 | 2023-10-30 | In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2023-21326 | Medium | 5.5 | 2023-10-30 | In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclo… |
CVE-2023-21325 | Medium | 5.5 | 2023-10-30 | In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This coul… |
CVE-2023-21324 | High | 7.8 | 2023-10-30 | In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure… |
CVE-2023-21323 | Medium | 5.5 | 2023-10-30 | In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. T… |
CVE-2023-21321 | Medium | 5.5 | 2023-10-30 | In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. This could lead to local information disclosure with… |
CVE-2023-21320 | Medium | 5.5 | 2023-10-30 | In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information disclosure. This coul… |
CVE-2023-21319 | Medium | 5.5 | 2023-10-30 | In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosure. This could lead to local information… |
CVE-2023-21318 | Medium | 5.5 | 2023-10-30 | In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2023-21317 | Medium | 5.5 | 2023-10-30 | In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2023-21316 | Medium | 5.5 | 2023-10-30 | In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2023-21315 | Medium | 6.5 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote (proximal/adjacent) information disclosure with n… |
CVE-2023-21314 | Medium | 4.4 | 2023-10-30 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2023-21313 | High | 7.8 | 2023-10-30 | In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of privilege wi… |
CVE-2023-21312 | Medium | 5.5 | 2023-10-30 | In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execu… |
CVE-2023-21311 | Medium | 5.5 | 2023-10-30 | In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. This could lead to local information di… |
CVE-2023-21310 | Medium | 6.7 | 2023-10-30 | In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-21309 | Medium | 5.5 | 2023-10-30 | In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution… |
CVE-2023-21308 | Medium | 5.5 | 2023-10-30 | In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… |
CVE-2023-21307 | Medium | 5.0 | 2023-10-30 | In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissions bypass. This co… |
CVE-2023-21306 | Medium | 5.5 | 2023-10-30 | In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to local inform… |
CVE-2023-21305 | Medium | 5.5 | 2023-10-30 | In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2023-21304 | Medium | 5.5 | 2023-10-30 | In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2023-21303 | Medium | 5.5 | 2023-10-30 | In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could… |
CVE-2023-21302 | Medium | 5.5 | 2023-10-30 | In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2023-21301 | Medium | 5.5 | 2023-10-30 | In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclos… |
CVE-2023-21300 | Medium | 5.5 | 2023-10-30 | In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2023-21299 | Medium | 5.5 | 2023-10-30 | In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Th… |
CVE-2023-21298 | High | 7.8 | 2023-10-30 | In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This could lead to local escalation of privilege… |
CVE-2023-21297 | Medium | 4.4 | 2023-10-30 | In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to local information disclosure with System… |
CVE-2023-21296 | Medium | 5.5 | 2023-10-30 | In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This co… |
CVE-2023-21295 | Medium | 5.5 | 2023-10-30 | In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information d… |
CVE-2023-21294 | Medium | 5.5 | 2023-10-30 | In Slice, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no addit… |
CVE-2023-21293 | Medium | 5.5 | 2023-10-30 | In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosur… |
CVE-2022-20264 | Medium | 5.5 | 2023-10-30 | In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel information disclosure… |
CVE-2021-39810 | High | 7.8 | 2023-10-30 | In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app without user consent du… |
CVE-2023-40140 | High | 7.8 | 2023-10-27 | In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead… |
CVE-2023-40139 | Medium | 5.5 | 2023-10-27 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with… |
CVE-2023-40138 | Low | 3.3 | 2023-10-27 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with… |
CVE-2023-40137 | Low | 3.3 | 2023-10-27 | In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informatio… |
CVE-2023-40136 | Low | 3.3 | 2023-10-27 | In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclos… |
CVE-2023-40135 | Low | 3.3 | 2023-10-27 | In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information… |
CVE-2023-40134 | Low | 3.3 | 2023-10-27 | In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure… |
CVE-2023-40133 | Medium | 5.5 | 2023-10-27 | In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informatio… |
CVE-2023-40131 | High | 7.0 | 2023-10-27 | In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additiona… |
CVE-2023-40130 | High | 7.8 | 2023-10-27 | In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2023-40129 | High | 8.8 | 2023-10-27 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) cod… |
CVE-2023-40128 | High | 7.8 | 2023-10-27 | In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi… |
CVE-2023-40127 | Low | 3.3 | 2023-10-27 | In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no addition… |
CVE-2023-40125 | High | 7.8 | 2023-10-27 | In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of pr… |
CVE-2023-40123 | Medium | 5.5 | 2023-10-27 | In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local infor… |
CVE-2023-40121 | Medium | 5.5 | 2023-10-27 | In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosu… |
CVE-2023-40120 | High | 7.8 | 2023-10-27 | In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local es… |
CVE-2023-40117 | High | 7.8 | 2023-10-27 | In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of priv… |
CVE-2023-40116 | High | 7.8 | 2023-10-27 | In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This co… |
CVE-2023-5472 | High | 8.8 | 2023-10-25 | Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2023-35663 | High | 7.5 | 2023-10-18 | In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclo… |
CVE-2023-35656 | High | 7.5 | 2023-10-18 | In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote inf… |
CVE-2023-5487 | Medium | 6.5 | 2023-10-11 | Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to… |
CVE-2023-5486 | Medium | 4.3 | 2023-10-11 | Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium… |
CVE-2023-5485 | Medium | 4.3 | 2023-10-11 | Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML p… |
CVE-2023-5484 | Medium | 6.5 | 2023-10-11 | Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chr… |
CVE-2023-5483 | Medium | 6.5 | 2023-10-11 | Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass content security policy via a crafted HTML… |
CVE-2023-5481 | Medium | 6.5 | 2023-10-11 | Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chro… |
CVE-2023-5479 | Medium | 6.5 | 2023-10-11 | Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extensio… |
CVE-2023-5478 | Medium | 4.3 | 2023-10-11 | Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (… |
CVE-2023-5477 | Medium | 4.3 | 2023-10-11 | Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass discretionary access control via a crafted… |
CVE-2023-5476 | High | 8.8 | 2023-10-11 | Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-5475 | Medium | 6.5 | 2023-10-11 | Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to b… |
CVE-2023-5474 | High | 8.8 | 2023-10-11 | Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to p… |
CVE-2023-5473 | Medium | 6.3 | 2023-10-11 | Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |