Page 59 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44440 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44439 | Medium | 5.5 | 2023-01-04 | In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileg… |
CVE-2022-44438 | Medium | 5.5 | 2023-01-04 | In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileg… |
CVE-2022-44437 | Medium | 5.5 | 2023-01-04 | In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileg… |
CVE-2022-44436 | Medium | 5.5 | 2023-01-04 | In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileg… |
CVE-2022-44435 | Medium | 5.5 | 2023-01-04 | In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileg… |
CVE-2022-44434 | Medium | 5.5 | 2023-01-04 | In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileg… |
CVE-2022-44432 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44431 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44430 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44429 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44428 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44427 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44426 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44425 | Medium | 5.5 | 2023-01-04 | In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44424 | Medium | 5.5 | 2023-01-04 | In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges n… |
CVE-2022-44423 | Medium | 5.5 | 2023-01-04 | In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges n… |
CVE-2022-44422 | Medium | 5.5 | 2023-01-04 | In music service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges n… |
CVE-2022-39118 | Medium | 5.5 | 2023-01-04 | In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39116 | Medium | 5.5 | 2023-01-04 | In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39104 | Medium | 5.5 | 2023-01-04 | In contacts service, there is a missing permission check. This could lead to local denial of service in Contacts service with no additional execution privilege… |
CVE-2022-39088 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39087 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39086 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39085 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39084 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39083 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39082 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-39081 | Medium | 6.7 | 2023-01-04 | In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. |
CVE-2022-38684 | Medium | 5.5 | 2023-01-04 | In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privilege… |
CVE-2022-38683 | Medium | 5.5 | 2023-01-04 | In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privilege… |
CVE-2022-38682 | Medium | 5.5 | 2023-01-04 | In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privilege… |
CVE-2022-38678 | Medium | 5.5 | 2023-01-04 | In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privilege… |
CVE-2022-32653 | Medium | 6.7 | 2023-01-03 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32652 | Medium | 6.7 | 2023-01-03 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32651 | Medium | 6.7 | 2023-01-03 | In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32650 | Medium | 6.7 | 2023-01-03 | In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32649 | Medium | 6.7 | 2023-01-03 | In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. Use… |
CVE-2022-32648 | Medium | 6.4 | 2023-01-03 | In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-32647 | Medium | 6.7 | 2023-01-03 | In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-32646 | Medium | 6.7 | 2023-01-03 | In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-32645 | Medium | 4.1 | 2023-01-03 | In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclosure with System execution privileges ne… |
CVE-2022-32644 | Medium | 6.4 | 2023-01-03 | In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-32641 | Medium | 6.7 | 2023-01-03 | In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-32640 | Medium | 6.7 | 2023-01-03 | In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2022-32639 | Medium | 4.4 | 2023-01-03 | In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-32638 | Medium | 6.4 | 2023-01-03 | In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-32637 | Medium | 6.7 | 2023-01-03 | In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-32636 | Medium | 6.7 | 2023-01-03 | In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-32635 | High | 7.8 | 2023-01-03 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2022-32623 | Medium | 6.7 | 2023-01-03 | In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of privilege with System execution privile… |
CVE-2022-4025 | Medium | 4.3 | 2023-01-02 | Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafte… |
CVE-2022-3863 | Medium | 6.1 | 2023-01-02 | Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-3842 | High | 7.5 | 2023-01-02 | Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2022-2743 | High | 8.8 | 2023-01-02 | Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in… |
CVE-2022-2742 | High | 8.8 | 2023-01-02 | Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2022-0801 | Medium | 6.1 | 2023-01-02 | Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page… |
CVE-2022-0337 | Medium | 6.5 | 2023-01-02 | Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive inf… |
CVE-2021-30558 | High | 8.8 | 2023-01-02 | Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy v… |
CVE-2021-21200 | Medium | 5.4 | 2023-01-02 | Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTM… |
CVE-2019-13768 | High | 7.4 | 2023-01-02 | Use after free in FileAPI in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Ch… |
CVE-2022-45413 | Medium | 6.1 | 2022-12-22 | Using the <code>S.browser_fallback_url parameter</code> parameter, an attacker could redirect a user to a URL and cause SameSite=Strict cookies to be sent.<br>… |
CVE-2022-45412 | High | 8.8 | 2022-12-22 | When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a string containing un… |
CVE-2022-40961 | Medium | 6.5 | 2022-12-22 | During startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow causing a potentially exploitable crash.<br>*This issue only af… |
CVE-2022-36317 | Medium | 6.5 | 2022-12-22 | When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Servi… |
CVE-2022-34469 | High | 8.1 | 2022-12-22 | When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox… |
CVE-2022-29910 | Medium | 6.1 | 2022-12-22 | When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings.<br>*Note: This issue only affected Firefox for… |
CVE-2022-22762 | Medium | 4.3 | 2022-12-22 | Under certain circumstances, a JavaScript alert (or prompt) could have been shown while another website was displayed underneath it. This could have been abuse… |
CVE-2022-22758 | High | 8.8 | 2022-12-22 | When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain… |
CVE-2022-1802 | High | 8.8 | 2022-12-22 | If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-control… |
CVE-2022-1529 | High | 8.8 | 2022-12-22 | An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype polluti… |
CVE-2021-4221 | Medium | 4.3 | 2022-12-22 | If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing a… |
CVE-2022-42544 | High | 7.8 | 2022-12-16 | In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could… |
CVE-2022-42543 | Medium | 4.4 | 2022-12-16 | In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2022-42542 | Medium | 6.7 | 2022-12-16 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2022-42535 | Medium | 5.5 | 2022-12-16 | In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with U… |
CVE-2022-42534 | High | 7.8 | 2022-12-16 | In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalatio… |
CVE-2022-42532 | Medium | 4.4 | 2022-12-16 | In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2022-42531 | High | 7.8 | 2022-12-16 | In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privileg… |
CVE-2022-42530 | Medium | 4.4 | 2022-12-16 | In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2022-42529 | Critical | 9.8 | 2022-12-16 | Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A |
CVE-2022-42527 | High | 7.5 | 2022-12-16 | In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional executi… |
CVE-2022-42526 | Medium | 6.7 | 2022-12-16 | In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2022-42525 | Medium | 6.7 | 2022-12-16 | In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2022-42524 | High | 7.5 | 2022-12-16 | In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2022-42523 | Medium | 6.7 | 2022-12-16 | In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2022-42522 | Medium | 4.4 | 2022-12-16 | In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2022-42521 | Medium | 6.7 | 2022-12-16 | In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Syst… |
CVE-2022-42520 | Medium | 6.7 | 2022-12-16 | In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System ex… |
CVE-2022-42519 | Medium | 6.7 | 2022-12-16 | In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escala… |
CVE-2022-42518 | Medium | 6.7 | 2022-12-16 | In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… |
CVE-2022-42517 | Medium | 4.4 | 2022-12-16 | In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2022-42516 | Medium | 4.4 | 2022-12-16 | In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This cou… |
CVE-2022-42515 | Medium | 4.4 | 2022-12-16 | In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local… |
CVE-2022-42514 | Medium | 4.4 | 2022-12-16 | In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local… |
CVE-2022-42513 | Medium | 6.7 | 2022-12-16 | In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to… |
CVE-2022-42512 | Medium | 4.4 | 2022-12-16 | In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2022-42511 | Medium | 6.7 | 2022-12-16 | In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2022-42510 | Medium | 6.7 | 2022-12-16 | In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation… |
CVE-2022-42509 | Medium | 6.7 | 2022-12-16 | In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |