Page 64 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39103 | Medium | 5.5 | 2022-10-14 | In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges… |
CVE-2022-39080 | High | 7.8 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privilege… |
CVE-2022-38698 | High | 7.8 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privilege… |
CVE-2022-38697 | Medium | 5.5 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privi… |
CVE-2022-38690 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-38689 | Medium | 5.5 | 2022-10-14 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-38688 | Medium | 5.5 | 2022-10-14 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-38687 | Medium | 5.5 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to local denial of service in messaging service with no additional execution privile… |
CVE-2022-38679 | Medium | 5.5 | 2022-10-14 | In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges need… |
CVE-2022-38677 | Medium | 5.5 | 2022-10-14 | In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed. |
CVE-2022-38676 | Medium | 5.5 | 2022-10-14 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38673 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38672 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38671 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38670 | High | 7.8 | 2022-10-14 | In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privi… |
CVE-2022-38669 | High | 7.8 | 2022-10-14 | In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privi… |
CVE-2022-2985 | High | 7.8 | 2022-10-14 | In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges ne… |
CVE-2022-2984 | Medium | 5.5 | 2022-10-14 | In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-20464 | Medium | 5.5 | 2022-10-14 | In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to… |
CVE-2022-20397 | High | 7.8 | 2022-10-14 | In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2021-0699 | High | 7.8 | 2022-10-14 | In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with… |
CVE-2022-3171 | Medium | 4.3 | 2022-10-12 | A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inp… |
CVE-2022-20440 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259918 |
CVE-2022-20439 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172 |
CVE-2022-20438 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259920 |
CVE-2022-20437 | Medium | 5.5 | 2022-10-11 | In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242258929 |
CVE-2022-20436 | High | 7.8 | 2022-10-11 | There is an unauthorized service in the system service. Since the component does not have permission check, resulting in Local Elevation of privilege.Product… |
CVE-2022-20435 | High | 7.8 | 2022-10-11 | There is a Unauthorized service in the system service, may cause the system reboot. Since the component does not have permission check and permission protectio… |
CVE-2022-20434 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20433 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20432 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in Loca… |
CVE-2022-20431 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20430 | High | 7.8 | 2022-10-11 | There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.P… |
CVE-2022-20429 | High | 8.8 | 2022-10-11 | In CarSettings of app packages, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth s… |
CVE-2022-20425 | Medium | 5.5 | 2022-10-11 | In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion. This could lead to local den… |
CVE-2022-20423 | Medium | 4.6 | 2022-10-11 | In rndis_set_response of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a mal… |
CVE-2022-20422 | High | 7.0 | 2022-10-11 | In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of priv… |
CVE-2022-20421 | High | 7.8 | 2022-10-11 | In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege wit… |
CVE-2022-20420 | High | 7.8 | 2022-10-11 | In getBackgroundRestrictionExemptionReason of AppRestrictionController.java, there is a possible way to bypass device policy restrictions due to a logic error… |
CVE-2022-20419 | High | 7.8 | 2022-10-11 | In setOptions of ActivityRecord.java, there is a possible load any arbitrary Java code into launcher process due to a logic error in the code. This could lead… |
CVE-2022-20418 | High | 7.5 | 2022-10-11 | In pickStartSeq of AAVCAssembler.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wi… |
CVE-2022-20417 | High | 7.8 | 2022-10-11 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20416 | High | 7.8 | 2022-10-11 | In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… |
CVE-2022-20415 | High | 7.8 | 2022-10-11 | In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due… |
CVE-2022-20413 | Medium | 5.5 | 2022-10-11 | In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information dis… |
CVE-2022-20412 | Medium | 6.7 | 2022-10-11 | In fdt_next_tag of fdt.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System… |
CVE-2022-20410 | High | 7.5 | 2022-10-11 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information discl… |
CVE-2022-20409 | Medium | 6.7 | 2022-10-11 | In io_identity_cow of io_uring.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with Syst… |
CVE-2022-20394 | Medium | 5.0 | 2022-10-11 | In getInputMethodWindowVisibleHeight of InputMethodManagerService.java, there is a possible way to determine when another app is showing an IME due to a missin… |
CVE-2022-20351 | Medium | 5.5 | 2022-10-11 | In queryInternal of CallLogProvider.java, there is a possible access to voicemail information due to SQL injection. This could lead to local information disclo… |
CVE-2021-0951 | High | 7.8 | 2022-10-11 | In DevmemIntHeapAcquire of TBD, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege with… |
CVE-2021-0696 | High | 7.0 | 2022-10-11 | In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no addition… |
CVE-2022-32593 | Medium | 6.7 | 2022-10-07 | In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-32592 | Medium | 6.7 | 2022-10-07 | In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2022-32591 | High | 7.5 | 2022-10-07 | In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges… |
CVE-2022-32590 | Medium | 6.7 | 2022-10-07 | In wlan, there is a possible use after free due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-32589 | High | 7.5 | 2022-10-07 | In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additiona… |
CVE-2022-26475 | Medium | 6.7 | 2022-10-07 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2022-26474 | Medium | 6.7 | 2022-10-07 | In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with Sys… |
CVE-2022-26473 | Medium | 6.7 | 2022-10-07 | In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2022-26472 | High | 7.8 | 2022-10-07 | In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execut… |
CVE-2022-26471 | High | 7.8 | 2022-10-07 | In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional… |
CVE-2022-26452 | Medium | 6.7 | 2022-10-07 | In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-39877 | Medium | 4.0 | 2022-10-07 | Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and be… |
CVE-2022-39862 | Medium | 5.3 | 2022-10-07 | Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascr… |
CVE-2022-39856 | Medium | 4.0 | 2022-10-07 | Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information. |
CVE-2022-39855 | Medium | 5.1 | 2022-10-07 | Improper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows a local attacker to connect arbitrary AP and Bluetooth devices. |
CVE-2022-39854 | Medium | 6.4 | 2022-10-07 | Improper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure memory. |
CVE-2022-39853 | Medium | 4.4 | 2022-10-07 | A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault. |
CVE-2022-39852 | High | 8.0 | 2022-10-07 | A heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 allows attacker to perform code execu… |
CVE-2022-39851 | Medium | 4.0 | 2022-10-07 | Improper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1 allows local attacker to bind service that require BIND_REMOTEVIEWS… |
CVE-2022-39850 | Low | 3.3 | 2022-10-07 | Improper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data. |
CVE-2022-39849 | Low | 3.3 | 2022-10-07 | Improper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data. |
CVE-2022-39848 | Medium | 4.0 | 2022-10-07 | Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log. |
CVE-2022-39847 | Medium | 4.9 | 2022-10-07 | Use after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to SMR Oct-2022 Release 1 allows attackers to perform malicious act… |
CVE-2022-36868 | Medium | 5.9 | 2022-10-07 | Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of the connected Bluetooth device. |
CVE-2019-5797 | High | 7.5 | 2022-09-29 | Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3201 | Medium | 5.4 | 2022-09-26 | Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to instal… |
CVE-2022-3200 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2022-3199 | High | 8.8 | 2022-09-26 | Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Ch… |
CVE-2022-3198 | High | 8.8 | 2022-09-26 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
CVE-2022-3197 | High | 8.8 | 2022-09-26 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
CVE-2022-3196 | High | 8.8 | 2022-09-26 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromi… |
CVE-2022-3195 | High | 8.8 | 2022-09-26 | Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML p… |
CVE-2022-3075 | Critical | 9.6 | 2022-09-26 | Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2022-3071 | High | 8.8 | 2022-09-26 | Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific U… |
CVE-2022-3058 | High | 8.8 | 2022-09-26 | Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to… |
CVE-2022-3057 | Medium | 6.5 | 2022-09-26 | Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to leak cross-origin data via a crafted HTML p… |
CVE-2022-3056 | Medium | 6.5 | 2022-09-26 | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to bypass content security policy… |
CVE-2022-3055 | High | 8.8 | 2022-09-26 | Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to pot… |
CVE-2022-3054 | Medium | 6.5 | 2022-09-26 | Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2022-3053 | Medium | 4.3 | 2022-09-26 | Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted… |
CVE-2022-3052 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in… |
CVE-2022-3051 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in spec… |
CVE-2022-3050 | High | 8.8 | 2022-09-26 | Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI inte… |
CVE-2022-3049 | High | 8.8 | 2022-09-26 | Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific… |
CVE-2022-3048 | Medium | 6.8 | 2022-09-26 | Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a local attacker to bypass lockscreen navigat… |
CVE-2022-3047 | Medium | 6.5 | 2022-09-26 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2022-3046 | High | 8.8 | 2022-09-26 | Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2022-3045 | High | 8.8 | 2022-09-26 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a… |