Page 58 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47331 | Medium | 4.7 | 2023-02-12 | In wlan driver, there is a race condition. This could lead to local denial of service in wlan services. |
CVE-2022-47330 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47329 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47328 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47327 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47326 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47325 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47324 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47323 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47322 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-44448 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-44447 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44421 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local In wlan driver, information disclosure. |
CVE-2022-42783 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38686 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38681 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38680 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38675 | Medium | 5.5 | 2023-02-12 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38674 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2023-21419 | Medium | 4.3 | 2023-02-09 | An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition. |
CVE-2023-0705 | High | 7.5 | 2023-02-07 | Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption… |
CVE-2023-0704 | Medium | 6.5 | 2023-02-07 | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings v… |
CVE-2023-0703 | High | 8.8 | 2023-02-07 | Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to pote… |
CVE-2023-0702 | High | 8.8 | 2023-02-07 | Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
CVE-2023-0701 | High | 8.8 | 2023-02-07 | Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to p… |
CVE-2023-0700 | Medium | 6.5 | 2023-02-07 | Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (UR… |
CVE-2023-0699 | High | 8.8 | 2023-02-07 | Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and brow… |
CVE-2023-0698 | High | 8.8 | 2023-02-07 | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2023-0697 | Medium | 6.5 | 2023-02-07 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the secu… |
CVE-2023-0696 | High | 8.8 | 2023-02-07 | Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-20619 | Medium | 6.7 | 2023-02-06 | In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20618 | Medium | 6.7 | 2023-02-06 | In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20616 | Medium | 6.7 | 2023-02-06 | In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20615 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20614 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20613 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20612 | Medium | 6.7 | 2023-02-06 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20611 | Medium | 6.4 | 2023-02-06 | In gpu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20610 | Medium | 6.4 | 2023-02-06 | In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20609 | Medium | 4.4 | 2023-02-06 | In ccu, there is a possible out of bounds read due to a logic error. This could lead to local information disclosure with System execution privileges needed. U… |
CVE-2023-20608 | Medium | 6.4 | 2023-02-06 | In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-20607 | Medium | 6.4 | 2023-02-06 | In ccu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20606 | Medium | 4.4 | 2023-02-06 | In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20605 | Medium | 4.4 | 2023-02-06 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution priv… |
CVE-2023-20604 | Medium | 6.7 | 2023-02-06 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20602 | Medium | 6.7 | 2023-02-06 | In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2022-32643 | Medium | 6.4 | 2023-02-06 | In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32642 | Medium | 6.4 | 2023-02-06 | In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32595 | Medium | 4.4 | 2023-02-06 | In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-0474 | High | 8.8 | 2023-01-30 | Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2023-0473 | High | 8.8 | 2023-01-30 | Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… |
CVE-2023-0472 | High | 8.8 | 2023-01-30 | Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2023-0471 | High | 8.8 | 2023-01-30 | Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-20928 | High | 7.8 | 2023-01-26 | In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additiona… |
CVE-2023-20925 | High | 7.8 | 2023-01-26 | In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of pri… |
CVE-2023-20924 | Medium | 6.8 | 2023-01-26 | In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of privilege with physic… |
CVE-2023-20923 | Medium | 5.5 | 2023-01-26 | In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypass. This could lead… |
CVE-2023-20922 | Medium | 5.5 | 2023-01-26 | In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no ad… |
CVE-2023-20921 | High | 7.3 | 2023-01-26 | In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logic error in the code… |
CVE-2023-20920 | High | 7.8 | 2023-01-26 | In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2023-20919 | High | 7.8 | 2023-01-26 | In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local es… |
CVE-2023-20916 | High | 7.8 | 2023-01-26 | In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starting activities from the background due t… |
CVE-2023-20915 | High | 7.8 | 2023-01-26 | In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without user interaction due to a logic error in t… |
CVE-2023-20913 | High | 7.8 | 2023-01-26 | In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to… |
CVE-2023-20912 | High | 7.8 | 2023-01-26 | In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permission check. This cou… |
CVE-2023-20908 | Medium | 5.5 | 2023-01-26 | In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with n… |
CVE-2023-20905 | High | 7.8 | 2023-01-26 | In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2023-20904 | High | 7.8 | 2023-01-26 | In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to loc… |
CVE-2022-20494 | Medium | 5.5 | 2023-01-26 | In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denial of service with no… |
CVE-2022-20493 | High | 7.8 | 2023-01-26 | In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of p… |
CVE-2022-20492 | High | 7.8 | 2023-01-26 | In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local es… |
CVE-2022-20490 | High | 7.8 | 2023-01-26 | In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to loca… |
CVE-2022-20489 | High | 7.8 | 2023-01-26 | In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local es… |
CVE-2022-20461 | High | 7.8 | 2023-01-26 | In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This could lead to local… |
CVE-2022-20458 | Medium | 5.5 | 2023-01-26 | The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" build. StatusBarNotification.getKey() cou… |
CVE-2022-20456 | High | 7.8 | 2023-01-26 | In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local… |
CVE-2022-20235 | Medium | 5.5 | 2023-01-26 | The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver itself, but prior to… |
CVE-2022-20215 | Medium | 5.5 | 2023-01-26 | In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. This could lead to local denial of servic… |
CVE-2022-20214 | Medium | 4.7 | 2023-01-26 | In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to… |
CVE-2022-20213 | Medium | 5.5 | 2023-01-26 | In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service w… |
CVE-2023-0141 | Medium | 4.3 | 2023-01-10 | Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (C… |
CVE-2023-0140 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restricti… |
CVE-2023-0139 | Medium | 6.5 | 2023-01-10 | Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restric… |
CVE-2023-0138 | High | 8.8 | 2023-01-10 | Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted H… |
CVE-2023-0137 | High | 8.8 | 2023-01-10 | Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious exte… |
CVE-2023-0136 | High | 8.8 | 2023-01-10 | Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI… |
CVE-2023-0135 | High | 8.8 | 2023-01-10 | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
CVE-2023-0134 | High | 8.8 | 2023-01-10 | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit… |
CVE-2023-0133 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permis… |
CVE-2023-0132 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a per… |
CVE-2023-0131 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a… |
CVE-2023-0130 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omn… |
CVE-2023-0129 | High | 8.8 | 2023-01-10 | Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to po… |
CVE-2023-0128 | High | 8.8 | 2023-01-10 | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI in… |
CVE-2022-44446 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44445 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44444 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44443 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44442 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-44441 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |