Page 48 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4452 | High | 8.8 | 2023-08-25 | Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted… |
CVE-2023-4431 | High | 8.1 | 2023-08-23 | Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted H… |
CVE-2023-4430 | High | 8.8 | 2023-08-23 | Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-4429 | High | 8.8 | 2023-08-23 | Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-4428 | High | 8.1 | 2023-08-23 | Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTM… |
CVE-2023-4427 | High | 8.1 | 2023-08-23 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML… |
CVE-2023-3481 | Medium | 5.7 | 2023-08-21 | Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to versi… |
CVE-2023-4369 | High | 8.8 | 2023-08-15 | Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a m… |
CVE-2023-4368 | High | 8.8 | 2023-08-15 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2023-4367 | Medium | 6.5 | 2023-08-15 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2023-4366 | High | 8.8 | 2023-08-15 | Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2023-4365 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page… |
CVE-2023-4364 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTM… |
CVE-2023-4363 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via… |
CVE-2023-4362 | High | 8.8 | 2023-08-15 | Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control… |
CVE-2023-4361 | Medium | 5.3 | 2023-08-15 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a cra… |
CVE-2023-4360 | Medium | 4.3 | 2023-08-15 | Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chro… |
CVE-2023-4359 | Medium | 5.3 | 2023-08-15 | Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the secu… |
CVE-2023-4358 | High | 8.8 | 2023-08-15 | Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-4357 | High | 8.8 | 2023-08-15 | Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a cr… |
CVE-2023-4356 | High | 8.8 | 2023-08-15 | Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to pote… |
CVE-2023-4355 | High | 8.8 | 2023-08-15 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2023-4354 | High | 8.8 | 2023-08-15 | Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-4353 | High | 8.8 | 2023-08-15 | Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-4352 | High | 8.8 | 2023-08-15 | Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-4351 | High | 8.8 | 2023-08-15 | Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap cor… |
CVE-2023-4350 | Medium | 6.5 | 2023-08-15 | Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of th… |
CVE-2023-4349 | High | 8.8 | 2023-08-15 | Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2023-2312 | High | 8.8 | 2023-08-15 | Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2023-35689 | High | 7.8 | 2023-08-14 | In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This c… |
CVE-2023-21292 | Medium | 5.5 | 2023-08-14 | In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could… |
CVE-2023-21290 | Medium | 5.5 | 2023-08-14 | In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service wit… |
CVE-2023-21289 | Medium | 5.5 | 2023-08-14 | In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure w… |
CVE-2023-21288 | Medium | 5.5 | 2023-08-14 | In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local informatio… |
CVE-2023-21287 | Critical | 9.8 | 2023-08-14 | In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileg… |
CVE-2023-21286 | High | 7.8 | 2023-08-14 | In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation… |
CVE-2023-21285 | Medium | 5.5 | 2023-08-14 | In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information… |
CVE-2023-21284 | Medium | 5.5 | 2023-08-14 | In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. Thi… |
CVE-2023-21283 | Medium | 5.5 | 2023-08-14 | In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information… |
CVE-2023-21282 | High | 8.8 | 2023-08-14 | In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with n… |
CVE-2023-21281 | High | 7.8 | 2023-08-14 | In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead… |
CVE-2023-21280 | Medium | 5.5 | 2023-08-14 | In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of… |
CVE-2023-21279 | Medium | 5.5 | 2023-08-14 | In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no a… |
CVE-2023-21278 | Low | 3.3 | 2023-08-14 | In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalatio… |
CVE-2023-21277 | Medium | 5.5 | 2023-08-14 | In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information… |
CVE-2023-21276 | Medium | 5.5 | 2023-08-14 | In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure wit… |
CVE-2023-21275 | High | 7.8 | 2023-08-14 | In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error… |
CVE-2023-21274 | Medium | 5.5 | 2023-08-14 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2023-21273 | High | 8.8 | 2023-08-14 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code… |
CVE-2023-21272 | High | 7.8 | 2023-08-14 | In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with n… |
CVE-2023-21271 | Medium | 5.5 | 2023-08-14 | In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosu… |
CVE-2023-21235 | High | 7.8 | 2023-08-14 | In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This… |
CVE-2023-21234 | Medium | 5.5 | 2023-08-14 | In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing… |
CVE-2023-21233 | High | 7.5 | 2023-08-14 | In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additi… |
CVE-2023-21232 | Low | 3.3 | 2023-08-14 | In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information di… |
CVE-2023-21231 | High | 7.8 | 2023-08-14 | In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity d… |
CVE-2023-21230 | Medium | 5.5 | 2023-08-14 | In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and… |
CVE-2023-21229 | High | 7.8 | 2023-08-14 | In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This co… |
CVE-2023-21269 | High | 7.8 | 2023-08-14 | In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could le… |
CVE-2023-21268 | Medium | 5.5 | 2023-08-14 | In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of servic… |
CVE-2023-21267 | Medium | 5.5 | 2023-08-14 | In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This… |
CVE-2023-21265 | High | 7.5 | 2023-08-14 | In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution… |
CVE-2023-21264 | Medium | 6.7 | 2023-08-14 | In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to… |
CVE-2023-21242 | Critical | 9.8 | 2023-08-14 | In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could l… |
CVE-2023-21140 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-21134 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-21133 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-21132 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-20965 | Critical | 9.8 | 2023-08-14 | In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to r… |
CVE-2023-33953 | High | 7.5 | 2023-08-09 | gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Th… |
CVE-2023-20818 | Medium | 4.4 | 2023-08-07 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20817 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20816 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20815 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20814 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20813 | Medium | 4.4 | 2023-08-07 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20812 | Medium | 4.4 | 2023-08-07 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20811 | Medium | 6.7 | 2023-08-07 | In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20810 | Medium | 4.4 | 2023-08-07 | In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution pr… |
CVE-2023-20809 | Medium | 6.7 | 2023-08-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20808 | Medium | 6.7 | 2023-08-07 | In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20807 | Medium | 6.7 | 2023-08-07 | In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20806 | Medium | 6.7 | 2023-08-07 | In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20805 | Medium | 6.7 | 2023-08-07 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20804 | Medium | 6.7 | 2023-08-07 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20803 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20802 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20801 | Medium | 6.4 | 2023-08-07 | In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20800 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20798 | Medium | 4.4 | 2023-08-07 | In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System exec… |
CVE-2023-20797 | Medium | 6.7 | 2023-08-07 | In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… |
CVE-2023-20796 | Medium | 4.4 | 2023-08-07 | In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges n… |
CVE-2023-20795 | Medium | 6.7 | 2023-08-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20793 | Medium | 4.4 | 2023-08-07 | In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed… |
CVE-2023-20790 | Medium | 4.4 | 2023-08-07 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20789 | Medium | 4.4 | 2023-08-07 | In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privil… |
CVE-2023-20788 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20787 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20786 | Medium | 6.7 | 2023-08-07 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20785 | Medium | 6.4 | 2023-08-07 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |