Page 46 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5218 | High | 8.8 | 2023-10-11 | Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2023-3781 | High | 7.8 | 2023-10-11 | there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-40142 | High | 7.8 | 2023-10-11 | In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2023-40141 | High | 7.8 | 2023-10-11 | In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2023-35662 | Critical | 9.8 | 2023-10-11 | there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User i… |
CVE-2023-35661 | High | 7.5 | 2023-10-11 | In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati… |
CVE-2023-35660 | Medium | 6.7 | 2023-10-11 | In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalatio… |
CVE-2023-35655 | Medium | 6.7 | 2023-10-11 | In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalati… |
CVE-2023-35654 | Medium | 6.7 | 2023-10-11 | In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2023-35653 | Medium | 4.4 | 2023-10-11 | In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System… |
CVE-2023-35652 | High | 7.5 | 2023-10-11 | In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35649 | High | 7.2 | 2023-10-11 | In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution wit… |
CVE-2023-35648 | Critical | 9.8 | 2023-10-11 | In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35647 | Critical | 9.8 | 2023-10-11 | In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-35646 | Critical | 9.8 | 2023-10-11 | In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution p… |
CVE-2023-35645 | Medium | 6.4 | 2023-10-11 | In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-40654 | Medium | 6.7 | 2023-10-08 | In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed |
CVE-2023-40653 | Medium | 6.7 | 2023-10-08 | In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed |
CVE-2023-40652 | Medium | 4.4 | 2023-10-08 | In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privi… |
CVE-2023-40651 | Medium | 4.4 | 2023-10-08 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-40650 | Medium | 5.5 | 2023-10-08 | In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40649 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40648 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40647 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40646 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40645 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40644 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40643 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40642 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40641 | Medium | 5.5 | 2023-10-08 | In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-40640 | Medium | 5.5 | 2023-10-08 | In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-40639 | Medium | 5.5 | 2023-10-08 | In SoundRecorder service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-40638 | Medium | 4.4 | 2023-10-08 | In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed |
CVE-2023-40637 | Medium | 5.5 | 2023-10-08 | In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-40636 | Medium | 4.4 | 2023-10-08 | In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information… |
CVE-2023-40635 | High | 7.8 | 2023-10-08 | In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-40634 | High | 7.8 | 2023-10-08 | In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges nee… |
CVE-2023-40633 | Medium | 5.5 | 2023-10-08 | In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges need… |
CVE-2023-40632 | High | 7.5 | 2023-10-08 | In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges nee… |
CVE-2023-40631 | Medium | 4.4 | 2023-10-08 | In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed |
CVE-2023-21291 | Medium | 5.5 | 2023-10-06 | In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. This could lead to loc… |
CVE-2023-21266 | High | 7.8 | 2023-10-06 | In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. This could lead to… |
CVE-2023-21253 | Medium | 5.5 | 2023-10-06 | In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no… |
CVE-2023-21252 | Medium | 5.5 | 2023-10-06 | In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead… |
CVE-2023-21244 | Medium | 6.7 | 2023-10-06 | In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation… |
CVE-2023-5346 | High | 8.8 | 2023-10-05 | Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-32830 | Medium | 6.7 | 2023-10-02 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32829 | Medium | 6.7 | 2023-10-02 | In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32828 | Medium | 6.7 | 2023-10-02 | In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32827 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32826 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32824 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-32823 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32822 | Medium | 6.7 | 2023-10-02 | In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32821 | Medium | 6.7 | 2023-10-02 | In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32820 | High | 7.5 | 2023-10-02 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional executi… |
CVE-2023-32819 | Medium | 4.4 | 2023-10-02 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-5217 | High | 8.8 | 2023-09-28 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap… |
CVE-2023-5187 | High | 8.8 | 2023-09-28 | Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-5186 | High | 8.8 | 2023-09-28 | Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to pot… |
CVE-2023-44216 | Medium | 5.3 | 2023-09-27 | PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing at… |
CVE-2023-44129 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.an… |
CVE-2023-44128 | Medium | 5.0 | 2023-09-27 | he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.Ins… |
CVE-2023-44127 | Low | 3.6 | 2023-09-27 | he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all thi… |
CVE-2023-44126 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensit… |
CVE-2023-44125 | Medium | 6.1 | 2023-09-27 | The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files… |
CVE-2023-44124 | Medium | 6.1 | 2023-09-27 | The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools… |
CVE-2023-44123 | Medium | 6.1 | 2023-09-27 | The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with… |
CVE-2023-44122 | Medium | 6.1 | 2023-09-27 | The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreens… |
CVE-2023-44121 | Medium | 5.0 | 2023-09-27 | The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This… |
CVE-2023-31014 | Medium | 4.2 | 2023-09-20 | NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implic… |
CVE-2023-4785 | High | 7.5 | 2023-09-13 | Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial… |
CVE-2023-4909 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML pag… |
CVE-2023-4908 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML pa… |
CVE-2023-4907 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTM… |
CVE-2023-4906 | Medium | 4.3 | 2023-09-12 | Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTM… |
CVE-2023-4905 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromi… |
CVE-2023-4904 | Medium | 4.3 | 2023-09-12 | Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Enterprise policy restrictions via a c… |
CVE-2023-4903 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a craf… |
CVE-2023-4902 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium… |
CVE-2023-4901 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML p… |
CVE-2023-4900 | Medium | 4.3 | 2023-09-12 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt via a… |
CVE-2023-4863 | High | 8.8 | 2023-09-12 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v… |
CVE-2023-35687 | High | 7.8 | 2023-09-11 | In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no a… |
CVE-2023-35684 | High | 8.8 | 2023-09-11 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege… |
CVE-2023-35683 | Medium | 5.5 | 2023-09-11 | In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local informat… |
CVE-2023-35682 | High | 7.8 | 2023-09-11 | In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to lo… |
CVE-2023-35681 | Critical | 9.8 | 2023-09-11 | In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution w… |
CVE-2023-35680 | Medium | 5.5 | 2023-09-11 | In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information discl… |
CVE-2023-35679 | Medium | 5.5 | 2023-09-11 | In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no… |
CVE-2023-35677 | Medium | 5.5 | 2023-09-11 | In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial o… |
CVE-2023-35676 | High | 7.8 | 2023-09-11 | In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. Th… |
CVE-2023-35675 | Medium | 5.5 | 2023-09-11 | In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device d… |
CVE-2023-35674 | High | 7.8 | 2023-09-11 | In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation… |
CVE-2023-35673 | High | 8.8 | 2023-09-11 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code e… |
CVE-2023-35671 | Medium | 5.5 | 2023-09-11 | In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details w… |
CVE-2023-35670 | High | 7.8 | 2023-09-11 | In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error… |
CVE-2023-35669 | High | 7.8 | 2023-09-11 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. Th… |
CVE-2023-35667 | High | 7.8 | 2023-09-11 | In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the c… |
CVE-2023-35666 | High | 7.8 | 2023-09-11 | In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with n… |