Page 56 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20991 | Medium | 4.4 | 2023-03-24 | In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounds check. This coul… |
CVE-2023-20990 | Medium | 4.4 | 2023-03-24 | In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20989 | Medium | 4.4 | 2023-03-24 | In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat… |
CVE-2023-20988 | Medium | 4.5 | 2023-03-24 | In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-20987 | Medium | 4.5 | 2023-03-24 | In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2023-20986 | Medium | 4.4 | 2023-03-24 | In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-20985 | High | 7.8 | 2023-03-24 | In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation. This could lead to local esca… |
CVE-2023-20984 | Medium | 4.4 | 2023-03-24 | In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2023-20983 | Medium | 4.4 | 2023-03-24 | In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20982 | Medium | 4.4 | 2023-03-24 | In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20981 | Medium | 4.4 | 2023-03-24 | In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20980 | Medium | 5.5 | 2023-03-24 | In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2023-20979 | Medium | 5.5 | 2023-03-24 | In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20977 | Medium | 4.4 | 2023-03-24 | In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation. This could lead to local i… |
CVE-2023-20976 | High | 7.3 | 2023-03-24 | In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper inp… |
CVE-2023-20975 | High | 7.8 | 2023-03-24 | In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due to a permissions bypa… |
CVE-2023-20974 | Medium | 5.5 | 2023-03-24 | In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to lo… |
CVE-2023-20973 | Medium | 5.5 | 2023-03-24 | In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2023-20972 | Medium | 5.5 | 2023-03-24 | In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20971 | High | 7.8 | 2023-03-24 | In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due to a logic error in… |
CVE-2023-20970 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20969 | Medium | 4.4 | 2023-03-24 | In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20968 | Medium | 4.4 | 2023-03-24 | In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-20966 | High | 7.8 | 2023-03-24 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2023-20964 | High | 7.8 | 2023-03-24 | In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service o… |
CVE-2023-20963 | High | 7.8 | 2023-03-24 | In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User inter… |
CVE-2023-20962 | Medium | 5.5 | 2023-03-24 | In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to an unsafe PendingIn… |
CVE-2023-20960 | High | 8.8 | 2023-03-24 | In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This… |
CVE-2023-20959 | High | 7.8 | 2023-03-24 | In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. This could lead to local escalation o… |
CVE-2023-20958 | High | 7.1 | 2023-03-24 | In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additi… |
CVE-2023-20957 | High | 7.8 | 2023-03-24 | In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. This could lead to local esca… |
CVE-2023-20956 | Medium | 4.4 | 2023-03-24 | In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-20955 | High | 7.8 | 2023-03-24 | In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to… |
CVE-2023-20954 | Critical | 9.8 | 2023-03-24 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no ad… |
CVE-2023-20953 | High | 7.8 | 2023-03-24 | In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being shown prior to setup co… |
CVE-2023-20952 | Medium | 5.5 | 2023-03-24 | In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclos… |
CVE-2023-20951 | Critical | 9.8 | 2023-03-24 | In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution w… |
CVE-2023-20947 | High | 7.8 | 2023-03-24 | In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. This could lead to… |
CVE-2023-20936 | High | 7.8 | 2023-03-24 | In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2023-20931 | High | 7.8 | 2023-03-24 | In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of pri… |
CVE-2023-20929 | Medium | 5.5 | 2023-03-24 | In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. Th… |
CVE-2023-20926 | Medium | 6.8 | 2023-03-24 | In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permission check. This coul… |
CVE-2023-20917 | High | 7.8 | 2023-03-24 | In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalati… |
CVE-2023-20911 | High | 7.8 | 2023-03-24 | In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustion. This could lead… |
CVE-2023-20910 | Medium | 5.5 | 2023-03-24 | In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of s… |
CVE-2023-20906 | High | 7.8 | 2023-03-24 | In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update due to a permissio… |
CVE-2022-42528 | Medium | 5.5 | 2023-03-24 | In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local information disclosure with no additional ex… |
CVE-2022-42500 | Medium | 6.7 | 2023-03-24 | In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could lead to local escalation of privilege wi… |
CVE-2022-42499 | Critical | 9.8 | 2023-03-24 | In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution… |
CVE-2022-42498 | Critical | 9.8 | 2023-03-24 | In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional… |
CVE-2022-20542 | High | 7.8 | 2023-03-24 | In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with n… |
CVE-2022-20532 | Critical | 9.8 | 2023-03-24 | In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of pr… |
CVE-2022-20499 | Medium | 5.5 | 2023-03-24 | In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no… |
CVE-2022-20467 | Medium | 5.5 | 2023-03-24 | In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. This could lead to local information disc… |
CVE-2023-1534 | High | 8.8 | 2023-03-21 | Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-1533 | High | 8.8 | 2023-03-21 | Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-1532 | High | 8.8 | 2023-03-21 | Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2023-1531 | High | 8.8 | 2023-03-21 | Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-1530 | High | 8.8 | 2023-03-21 | Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2023-1529 | Critical | 9.8 | 2023-03-21 | Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious… |
CVE-2023-1528 | High | 8.8 | 2023-03-21 | Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2023-21464 | Medium | 4.0 | 2023-03-16 | Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure impr… |
CVE-2023-21463 | Medium | 4.0 | 2023-03-16 | Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 a… |
CVE-2023-21462 | Medium | 4.2 | 2023-03-16 | The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local att… |
CVE-2022-47484 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47483 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47482 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47481 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47480 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47479 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47478 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47477 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47476 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47475 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47474 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47473 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47472 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47471 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47462 | Medium | 6.7 | 2023-03-10 | In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. |
CVE-2022-47461 | Medium | 6.7 | 2023-03-10 | In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. |
CVE-2022-47460 | Medium | 5.5 | 2023-03-10 | In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel. |
CVE-2022-47459 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47458 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47457 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47456 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47455 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47454 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47453 | Medium | 5.5 | 2023-03-10 | In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service. |
CVE-2023-1236 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML… |
CVE-2023-1235 | Medium | 6.3 | 2023-03-07 | Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2023-1234 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted H… |
CVE-2023-1233 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exte… |
CVE-2023-1232 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive informatio… |
CVE-2023-1231 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the… |
CVE-2023-1230 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malici… |
CVE-2023-1229 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a cr… |
CVE-2023-1228 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a… |
CVE-2023-1227 | High | 8.8 | 2023-03-07 | Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
CVE-2023-1226 | Medium | 6.5 | 2023-03-07 | Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a c… |
CVE-2023-1225 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a craft… |