Page 57 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1224 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a c… |
CVE-2023-1223 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafte… |
CVE-2023-1222 | High | 8.8 | 2023-03-07 | Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2023-1221 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2023-1220 | High | 8.8 | 2023-03-07 | Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
CVE-2023-1219 | High | 8.8 | 2023-03-07 | Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2023-1218 | High | 8.8 | 2023-03-07 | Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-1217 | Medium | 6.5 | 2023-03-07 | Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process… |
CVE-2023-1216 | High | 8.8 | 2023-03-07 | Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to… |
CVE-2023-1215 | High | 8.8 | 2023-03-07 | Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-1214 | High | 8.8 | 2023-03-07 | Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-1213 | High | 8.8 | 2023-03-07 | Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-20651 | Medium | 4.4 | 2023-03-07 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20650 | Medium | 6.7 | 2023-03-07 | In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20649 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20648 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20647 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20646 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20645 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20644 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20643 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20642 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20641 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20640 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20639 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20638 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20637 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20636 | Medium | 6.7 | 2023-03-07 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20635 | Medium | 4.4 | 2023-03-07 | In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution pri… |
CVE-2023-20634 | Medium | 6.7 | 2023-03-07 | In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20633 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20632 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20630 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20628 | Medium | 6.7 | 2023-03-07 | In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20627 | Medium | 6.7 | 2023-03-07 | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20626 | Medium | 6.7 | 2023-03-07 | In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20625 | Medium | 6.4 | 2023-03-07 | In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. Use… |
CVE-2023-20624 | Medium | 6.7 | 2023-03-07 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20623 | Medium | 6.4 | 2023-03-07 | In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2023-20621 | Medium | 6.7 | 2023-03-07 | In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20620 | Medium | 4.1 | 2023-03-07 | In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2023-0460 | Medium | 5.1 | 2023-03-01 | The YouTube Embedded 1.2 SDK binds to a service within the YouTube Main App. After binding, a remote context is created with the flags Context.CONTEXT_INCLUDE_… |
CVE-2023-20948 | High | 7.5 | 2023-02-28 | In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disc… |
CVE-2023-20946 | Critical | 9.8 | 2023-02-28 | In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of… |
CVE-2023-20945 | High | 7.8 | 2023-02-28 | In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local es… |
CVE-2023-20944 | High | 7.8 | 2023-02-28 | In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of… |
CVE-2023-20943 | High | 7.8 | 2023-02-28 | In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to lo… |
CVE-2023-20940 | High | 7.8 | 2023-02-28 | In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of priv… |
CVE-2023-20939 | High | 7.8 | 2023-02-28 | In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation o… |
CVE-2023-20938 | High | 7.8 | 2023-02-28 | In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of p… |
CVE-2023-20937 | High | 7.8 | 2023-02-28 | In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of pri… |
CVE-2023-20934 | High | 7.8 | 2023-02-28 | In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This coul… |
CVE-2023-20933 | High | 7.8 | 2023-02-28 | In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2023-20932 | Low | 3.3 | 2023-02-28 | In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could… |
CVE-2022-20551 | Medium | 6.7 | 2023-02-28 | In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to lo… |
CVE-2022-20481 | Medium | 5.5 | 2023-02-28 | In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclosure with n… |
CVE-2022-20455 | Medium | 5.5 | 2023-02-28 | In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of s… |
CVE-2023-0941 | High | 8.8 | 2023-02-22 | Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (C… |
CVE-2023-0933 | High | 8.8 | 2023-02-22 | Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chro… |
CVE-2023-0932 | High | 8.8 | 2023-02-22 | Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interact… |
CVE-2023-0931 | High | 8.8 | 2023-02-22 | Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-0930 | High | 8.8 | 2023-02-22 | Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-0929 | High | 8.8 | 2023-02-22 | Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-0928 | High | 8.8 | 2023-02-22 | Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-0927 | High | 8.8 | 2023-02-22 | Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to po… |
CVE-2021-26277 | Medium | 5.6 | 2023-02-17 | The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions. |
CVE-2023-20949 | Medium | 5.5 | 2023-02-15 | In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclo… |
CVE-2023-20927 | High | 7.8 | 2023-02-15 | In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation… |
CVE-2023-23374 | High | 8.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-47452 | Medium | 5.5 | 2023-02-12 | In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-47451 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47450 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47371 | Medium | 5.5 | 2023-02-12 | In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel. |
CVE-2022-47370 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47369 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47368 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47367 | Medium | 5.5 | 2023-02-12 | In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47366 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-47365 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-47364 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-47363 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-47361 | High | 7.8 | 2023-02-12 | In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. |
CVE-2022-47360 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47359 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47358 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47357 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47356 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47355 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47354 | Medium | 5.5 | 2023-02-12 | In log service, there is a missing permission check. This could lead to local denial of service in log service. |
CVE-2022-47348 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47347 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47346 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47345 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47344 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47343 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47342 | Medium | 5.5 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services. |
CVE-2022-47341 | Medium | 6.7 | 2023-02-12 | In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. |
CVE-2022-47339 | Medium | 6.7 | 2023-02-12 | In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution… |
CVE-2022-47333 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47332 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |