Page 49 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20784 | Medium | 6.7 | 2023-08-07 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20783 | Medium | 6.7 | 2023-08-07 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20782 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-20781 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges… |
CVE-2023-20780 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-33913 | High | 7.2 | 2023-08-07 | In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with… |
CVE-2023-33912 | Medium | 5.5 | 2023-08-07 | In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33911 | Medium | 5.5 | 2023-08-07 | In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33910 | Medium | 5.5 | 2023-08-07 | In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33909 | Medium | 5.5 | 2023-08-07 | In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33908 | Medium | 5.5 | 2023-08-07 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33907 | Medium | 5.5 | 2023-08-07 | In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33906 | Medium | 5.5 | 2023-08-07 | In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2022-47351 | Medium | 4.4 | 2023-08-07 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-47350 | Medium | 4.4 | 2023-08-07 | In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2022-4955 | Medium | 6.5 | 2023-08-04 | Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to b… |
CVE-2023-4078 | High | 8.8 | 2023-08-03 | Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension t… |
CVE-2023-4077 | High | 8.8 | 2023-08-03 | Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension t… |
CVE-2023-4076 | High | 8.8 | 2023-08-03 | Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session… |
CVE-2023-4075 | High | 8.8 | 2023-08-03 | Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2023-4074 | High | 8.8 | 2023-08-03 | Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2023-4073 | High | 8.8 | 2023-08-03 | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a cra… |
CVE-2023-4072 | High | 8.8 | 2023-08-03 | Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2023-4071 | High | 8.8 | 2023-08-03 | Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2023-4070 | High | 8.1 | 2023-08-03 | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secu… |
CVE-2023-4069 | High | 8.8 | 2023-08-03 | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-4068 | High | 8.1 | 2023-08-03 | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secu… |
CVE-2023-3740 | Medium | 4.3 | 2023-08-01 | Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content t… |
CVE-2023-3739 | Medium | 6.3 | 2023-08-01 | Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker to execute arbitrary code… |
CVE-2023-3738 | Medium | 4.3 | 2023-08-01 | Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (C… |
CVE-2023-3737 | Medium | 4.3 | 2023-08-01 | Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications vi… |
CVE-2023-3736 | Medium | 4.3 | 2023-08-01 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafte… |
CVE-2023-3735 | Medium | 4.3 | 2023-08-01 | Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a cra… |
CVE-2023-3734 | Medium | 4.3 | 2023-08-01 | Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the O… |
CVE-2023-3733 | Medium | 4.3 | 2023-08-01 | Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omni… |
CVE-2023-3732 | High | 8.8 | 2023-08-01 | Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially e… |
CVE-2023-3731 | High | 8.8 | 2023-08-01 | Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a user to install a malicious extension to… |
CVE-2023-3730 | High | 8.8 | 2023-08-01 | Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to po… |
CVE-2023-3729 | High | 8.8 | 2023-08-01 | Use after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker who convinced a user to engage in specific UI inte… |
CVE-2023-3728 | High | 8.8 | 2023-08-01 | Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-3727 | High | 8.8 | 2023-08-01 | Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-2314 | Medium | 6.5 | 2023-07-29 | Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML… |
CVE-2023-2313 | High | 8.8 | 2023-07-29 | Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process t… |
CVE-2023-2311 | Medium | 6.5 | 2023-07-29 | Insufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass filesystem restrictions via a cr… |
CVE-2022-4926 | Medium | 6.5 | 2023-07-29 | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119 allowed a remote attacker to bypass same origin policy via a cra… |
CVE-2022-4925 | Medium | 6.5 | 2023-07-29 | Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via malicious n… |
CVE-2022-4924 | Critical | 9.6 | 2023-07-29 | Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2022-4923 | Low | 3.1 | 2023-07-29 | Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-mid… |
CVE-2022-4922 | Medium | 6.5 | 2023-07-29 | Inappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromiu… |
CVE-2022-4921 | High | 8.8 | 2023-07-29 | Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestures to perf… |
CVE-2022-4920 | Critical | 9.6 | 2023-07-29 | Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to poten… |
CVE-2022-4919 | High | 8.8 | 2023-07-29 | Use after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Ch… |
CVE-2022-4918 | High | 8.8 | 2023-07-29 | Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium secur… |
CVE-2022-4917 | Medium | 4.3 | 2023-07-29 | Incorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed a remote attacker to obscure the full screen notification via… |
CVE-2022-4916 | High | 8.8 | 2023-07-29 | Use after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium se… |
CVE-2022-4915 | Medium | 6.5 | 2023-07-29 | Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofing via a crafted HTML… |
CVE-2022-4914 | High | 8.8 | 2023-07-29 | Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to poten… |
CVE-2022-4913 | Medium | 6.5 | 2023-07-29 | Inappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to spoof… |
CVE-2022-4912 | High | 8.8 | 2023-07-29 | Type Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2022-4911 | Medium | 6.5 | 2023-07-29 | Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML… |
CVE-2022-4910 | Medium | 5.4 | 2023-07-29 | Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML… |
CVE-2022-4909 | Medium | 6.3 | 2023-07-29 | Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a crafted HTML… |
CVE-2022-4908 | Medium | 4.3 | 2023-07-29 | Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML p… |
CVE-2022-4907 | High | 8.8 | 2023-07-29 | Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pag… |
CVE-2022-4906 | High | 8.8 | 2023-07-29 | Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page… |
CVE-2021-4324 | Medium | 6.5 | 2023-07-29 | Insufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to read arbitrary files via a malicious file… |
CVE-2021-4323 | Medium | 6.5 | 2023-07-29 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious… |
CVE-2021-4322 | High | 8.8 | 2023-07-29 | Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execute arbitrar… |
CVE-2021-4321 | Medium | 4.3 | 2023-07-29 | Policy bypass in Blink in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium se… |
CVE-2021-4320 | High | 8.8 | 2023-07-29 | Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/wr… |
CVE-2021-4319 | High | 8.8 | 2023-07-29 | Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium sec… |
CVE-2021-4318 | High | 8.8 | 2023-07-29 | Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (… |
CVE-2021-4317 | High | 8.8 | 2023-07-29 | Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium sec… |
CVE-2021-4316 | Medium | 4.3 | 2023-07-29 | Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. (Chromium… |
CVE-2023-3598 | High | 8.8 | 2023-07-28 | Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2023-2626 | High | 7.5 | 2023-07-25 | There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft r… |
CVE-2023-35692 | High | 7.8 | 2023-07-14 | In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could… |
CVE-2023-21260 | Medium | 5.5 | 2023-07-13 | In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and possibly… |
CVE-2023-35694 | High | 7.5 | 2023-07-13 | In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informa… |
CVE-2023-35693 | Medium | 6.7 | 2023-07-13 | In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System… |
CVE-2023-35691 | High | 7.2 | 2023-07-13 | there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User… |
CVE-2023-21400 | Medium | 6.7 | 2023-07-13 | In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could lead to local escalation of privilege in… |
CVE-2023-21399 | High | 7.8 | 2023-07-13 | there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additiona… |
CVE-2023-21262 | Low | 3.1 | 2023-07-13 | In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This… |
CVE-2023-21257 | High | 7.8 | 2023-07-13 | In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. Thi… |
CVE-2023-21256 | High | 7.8 | 2023-07-13 | In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could lead to loca… |
CVE-2023-21255 | High | 7.8 | 2023-07-13 | In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no addi… |
CVE-2023-21254 | High | 7.8 | 2023-07-13 | In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a logic erro… |
CVE-2023-21251 | High | 7.3 | 2023-07-13 | In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to loca… |
CVE-2023-21250 | Critical | 9.8 | 2023-07-13 | In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no… |
CVE-2023-21249 | Medium | 5.5 | 2023-07-13 | In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to l… |
CVE-2023-21248 | High | 7.8 | 2023-07-13 | In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing per… |
CVE-2023-21247 | High | 7.8 | 2023-07-13 | In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missin… |
CVE-2023-21246 | Low | 3.3 | 2023-07-13 | In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead… |
CVE-2023-21245 | High | 7.8 | 2023-07-13 | In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a l… |
CVE-2023-21243 | Medium | 5.5 | 2023-07-13 | In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due to a buffer overflo… |
CVE-2023-21241 | High | 7.8 | 2023-07-13 | In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with… |
CVE-2023-21240 | Medium | 5.5 | 2023-07-13 | In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution pri… |
CVE-2023-21239 | Medium | 5.5 | 2023-07-13 | In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local informa… |
CVE-2023-21238 | Medium | 5.5 | 2023-07-13 | In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could lead to local information disclosure wi… |