Page 61 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20512 | High | 7.8 | 2022-12-16 | In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. This could lead to… |
CVE-2022-20511 | Medium | 5.5 | 2022-12-16 | In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosure with no… |
CVE-2022-20510 | Medium | 5.5 | 2022-12-16 | In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy of other u… |
CVE-2022-20509 | Medium | 6.7 | 2022-12-16 | In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2022-20508 | High | 7.8 | 2022-12-16 | In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could lead to loc… |
CVE-2022-20507 | High | 7.8 | 2022-12-16 | In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds check. This could le… |
CVE-2022-20506 | High | 7.8 | 2022-12-16 | In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with no additio… |
CVE-2022-20505 | Medium | 6.7 | 2022-12-16 | In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with… |
CVE-2022-20504 | Medium | 6.7 | 2022-12-16 | In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissal of syste… |
CVE-2022-20503 | High | 7.8 | 2022-12-16 | In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This c… |
CVE-2022-20199 | Medium | 5.5 | 2022-12-16 | In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information disclosure… |
CVE-2022-4440 | High | 8.8 | 2022-12-14 | Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2022-4439 | High | 8.8 | 2022-12-14 | Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactio… |
CVE-2022-4438 | High | 8.8 | 2022-12-14 | Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions… |
CVE-2022-4437 | High | 8.8 | 2022-12-14 | Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2022-4436 | High | 8.8 | 2022-12-14 | Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2022-20611 | High | 7.8 | 2022-12-13 | In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could l… |
CVE-2022-20502 | Medium | 5.5 | 2022-12-13 | In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with n… |
CVE-2022-20501 | High | 7.3 | 2022-12-13 | In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/ov… |
CVE-2022-20500 | Medium | 5.5 | 2022-12-13 | In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no addi… |
CVE-2022-20498 | Medium | 4.4 | 2022-12-13 | In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2022-20497 | Medium | 4.6 | 2022-12-13 | In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreen due to an incorr… |
CVE-2022-20496 | Medium | 5.5 | 2022-12-13 | In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information di… |
CVE-2022-20495 | High | 7.8 | 2022-12-13 | In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code… |
CVE-2022-20491 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20488 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20487 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20486 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20485 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20484 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20483 | High | 7.5 | 2022-12-13 | In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could… |
CVE-2022-20482 | Medium | 5.5 | 2022-12-13 | In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and require factory reset due to resource exhaust… |
CVE-2022-20480 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20479 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20478 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20477 | High | 7.8 | 2022-12-13 | In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code… |
CVE-2022-20476 | Medium | 5.5 | 2022-12-13 | In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead… |
CVE-2022-20475 | High | 7.8 | 2022-12-13 | In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lea… |
CVE-2022-20474 | High | 7.8 | 2022-12-13 | In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local… |
CVE-2022-20473 | Critical | 9.8 | 2022-12-13 | In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with… |
CVE-2022-20472 | Critical | 9.8 | 2022-12-13 | In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with… |
CVE-2022-20471 | Medium | 5.5 | 2022-12-13 | In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2022-20470 | High | 7.8 | 2022-12-13 | In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This cou… |
CVE-2022-20469 | High | 8.8 | 2022-12-13 | In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2022-20468 | Medium | 6.5 | 2022-12-13 | In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure ov… |
CVE-2022-20466 | Medium | 5.5 | 2022-12-13 | In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an in… |
CVE-2022-20449 | Medium | 4.4 | 2022-12-13 | In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to… |
CVE-2022-20442 | High | 7.3 | 2022-12-13 | In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a tapjacking/overlay… |
CVE-2022-20411 | High | 8.8 | 2022-12-13 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetoot… |
CVE-2022-20240 | Low | 2.3 | 2022-12-13 | In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead t… |
CVE-2021-39660 | High | 7.0 | 2022-12-13 | In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege… |
CVE-2021-0934 | Medium | 5.5 | 2022-12-13 | In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no a… |
CVE-2022-29580 | High | 8.9 | 2022-12-13 | There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symbolic encod… |
CVE-2022-3510 | High | 7.5 | 2022-12-12 | A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 c… |
CVE-2022-3509 | High | 7.5 | 2022-12-12 | A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a… |
CVE-2022-39915 | Low | 3.3 | 2022-12-08 | Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), a… |
CVE-2022-39914 | Medium | 4.0 | 2022-12-08 | Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T(13) allows local attacker to acc… |
CVE-2022-39913 | Medium | 6.8 | 2022-12-08 | Exposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T(13) allows local attacker to access user profiles information. |
CVE-2022-39912 | Medium | 6.2 | 2022-12-08 | Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to… |
CVE-2022-39908 | Medium | 6.9 | 2022-12-08 | TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write. |
CVE-2022-39907 | Medium | 6.9 | 2022-12-08 | Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds… |
CVE-2022-39906 | Low | 2.3 | 2022-12-08 | Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to access message information. |
CVE-2022-39905 | Medium | 4.0 | 2022-12-08 | Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit int… |
CVE-2022-39904 | Low | 3.3 | 2022-12-08 | Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attackers to access the Network Access Identif… |
CVE-2022-39903 | Medium | 4.0 | 2022-12-08 | Improper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local attackers to access RCS incoming call number. |
CVE-2022-39900 | Medium | 4.6 | 2022-12-08 | Improper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows physical attackers to access contents of all toast generated in the… |
CVE-2022-39899 | Medium | 5.7 | 2022-12-08 | Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gestu… |
CVE-2022-39898 | Medium | 4.0 | 2022-12-08 | Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some information of usim. |
CVE-2022-39897 | Medium | 4.4 | 2022-12-08 | Exposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows attackers to access the kernel address information via log. |
CVE-2022-39896 | Medium | 4.0 | 2022-12-08 | Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent. |
CVE-2022-39895 | Medium | 4.0 | 2022-12-08 | Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access contact group information via implicit inte… |
CVE-2022-39894 | Medium | 4.0 | 2022-12-08 | Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via imp… |
CVE-2022-41910 | Medium | 4.8 | 2022-12-06 | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and output… |
CVE-2022-41902 | High | 7.1 | 2022-12-06 | TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and output… |
CVE-2022-42782 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. |
CVE-2022-42781 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42780 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42779 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42778 | High | 7.8 | 2022-12-06 | In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges need… |
CVE-2022-42777 | High | 7.8 | 2022-12-06 | In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges ne… |
CVE-2022-42776 | High | 7.8 | 2022-12-06 | In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed. |
CVE-2022-42775 | Medium | 5.5 | 2022-12-06 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-42774 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42773 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42772 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42771 | Medium | 4.7 | 2022-12-06 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. |
CVE-2022-42770 | Medium | 4.7 | 2022-12-06 | In wlan driver, there is a race condition, This could lead to local denial of service in wlan services. |
CVE-2022-42769 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42768 | Medium | 4.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42767 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42766 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. |
CVE-2022-42765 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42764 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42763 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42762 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42761 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42760 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42759 | Medium | 5.5 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42758 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |
CVE-2022-42757 | Low | 3.3 | 2022-12-06 | In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. |