Page 52 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32731 | High | 7.4 | 2023-06-09 | When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be ski… |
CVE-2023-1428 | High | 7.5 | 2023-06-09 | There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2… |
CVE-2023-20752 | Medium | 6.7 | 2023-06-06 | In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20751 | Medium | 6.7 | 2023-06-06 | In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20750 | Medium | 4.1 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges need… |
CVE-2023-20749 | Medium | 6.7 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20747 | Medium | 4.4 | 2023-06-06 | In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User i… |
CVE-2023-20746 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20745 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20744 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User… |
CVE-2023-20743 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20742 | Medium | 4.4 | 2023-06-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20741 | Medium | 4.4 | 2023-06-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20740 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20739 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20738 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20737 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20736 | Medium | 6.4 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20735 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20734 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20733 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20732 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20731 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20730 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20729 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20728 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20725 | Medium | 6.7 | 2023-06-06 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20724 | Medium | 6.7 | 2023-06-06 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20723 | Medium | 6.7 | 2023-06-06 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20716 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20715 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20712 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20727 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-30915 | Medium | 5.5 | 2023-06-06 | In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30914 | Medium | 5.5 | 2023-06-06 | In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30866 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30865 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30864 | High | 7.8 | 2023-06-06 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-30863 | High | 7.8 | 2023-06-06 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48448 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48447 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48446 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48445 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48444 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48443 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48442 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48441 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48440 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48439 | Medium | 4.4 | 2023-06-06 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48438 | Medium | 4.4 | 2023-06-06 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48392 | High | 7.8 | 2023-06-06 | In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48391 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48390 | High | 7.8 | 2023-06-06 | In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-3079 | High | 8.8 | 2023-06-05 | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-33741 | High | 7.5 | 2023-05-30 | Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device. |
CVE-2023-33740 | High | 7.5 | 2023-05-30 | Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo the Verify parameter in a warning mess… |
CVE-2023-2941 | Medium | 4.3 | 2023-05-30 | Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extensio… |
CVE-2023-2940 | Medium | 6.5 | 2023-05-30 | Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to… |
CVE-2023-2939 | High | 7.8 | 2023-05-30 | Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via craft… |
CVE-2023-2938 | Medium | 4.3 | 2023-05-30 | Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process t… |
CVE-2023-2937 | Medium | 4.3 | 2023-05-30 | Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process t… |
CVE-2023-2936 | High | 8.8 | 2023-05-30 | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-2935 | High | 8.8 | 2023-05-30 | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-2934 | High | 8.8 | 2023-05-30 | Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2023-2933 | High | 8.8 | 2023-05-30 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
CVE-2023-2932 | High | 8.8 | 2023-05-30 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
CVE-2023-2931 | High | 8.8 | 2023-05-30 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromiu… |
CVE-2023-2930 | High | 8.8 | 2023-05-30 | Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2023-2929 | High | 8.8 | 2023-05-30 | Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2023-2726 | High | 8.8 | 2023-05-16 | Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web ap… |
CVE-2023-2725 | High | 8.8 | 2023-05-16 | Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-2724 | High | 8.8 | 2023-05-16 | Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-2723 | High | 8.8 | 2023-05-16 | Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
CVE-2023-2722 | High | 8.8 | 2023-05-16 | Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2023-2721 | High | 8.8 | 2023-05-16 | Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-21118 | Medium | 5.5 | 2023-05-15 | In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with n… |
CVE-2023-21117 | High | 7.8 | 2023-05-15 | In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permiss… |
CVE-2023-21116 | Medium | 6.7 | 2023-05-15 | In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in… |
CVE-2023-21112 | Medium | 5.5 | 2023-05-15 | In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2023-21111 | Medium | 5.5 | 2023-05-15 | In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This c… |
CVE-2023-21110 | High | 7.8 | 2023-05-15 | In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalatio… |
CVE-2023-21109 | High | 7.8 | 2023-05-15 | In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This could lead to local es… |
CVE-2023-21107 | High | 7.8 | 2023-05-15 | In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user bounda… |
CVE-2023-21106 | High | 7.8 | 2023-05-15 | In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no addit… |
CVE-2023-21104 | Medium | 5.5 | 2023-05-15 | In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges… |
CVE-2023-21103 | Medium | 5.5 | 2023-05-15 | In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with… |
CVE-2023-21102 | High | 7.8 | 2023-05-15 | In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local e… |
CVE-2023-20930 | Medium | 5.5 | 2023-05-15 | In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local… |
CVE-2023-20914 | Medium | 5.5 | 2023-05-15 | In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for the work profile to read SMS messages due… |
CVE-2023-20726 | Low | 3.3 | 2023-05-15 | In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional executi… |
CVE-2023-20722 | Medium | 6.7 | 2023-05-15 | In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20721 | Medium | 6.7 | 2023-05-15 | In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20720 | Medium | 6.7 | 2023-05-15 | In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20719 | Medium | 4.4 | 2023-05-15 | In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-20718 | Medium | 6.7 | 2023-05-15 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20717 | Medium | 4.1 | 2023-05-15 | In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed… |
CVE-2023-20711 | Medium | 4.4 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20710 | Medium | 4.4 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20709 | Medium | 4.4 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20708 | Medium | 6.7 | 2023-05-15 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |