Page 65 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3044 | Medium | 6.5 | 2022-09-26 | Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to by… |
CVE-2022-3043 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2022-3042 | High | 8.8 | 2022-09-26 | Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2022-3041 | High | 8.8 | 2022-09-26 | Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3040 | High | 8.8 | 2022-09-26 | Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3039 | High | 8.8 | 2022-09-26 | Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3038 | High | 8.8 | 2022-09-26 | Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-2998 | High | 8.8 | 2022-09-26 | Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI inter… |
CVE-2022-2861 | Medium | 6.5 | 2022-09-26 | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extensi… |
CVE-2022-2860 | Medium | 6.5 | 2022-09-26 | Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafte… |
CVE-2022-2859 | High | 8.8 | 2022-09-26 | Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions… |
CVE-2022-2858 | High | 8.8 | 2022-09-26 | Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI intera… |
CVE-2022-2857 | High | 8.8 | 2022-09-26 | Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2856 | Medium | 6.5 | 2022-09-26 | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a… |
CVE-2022-2855 | High | 8.8 | 2022-09-26 | Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2854 | High | 8.8 | 2022-09-26 | Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2853 | High | 8.8 | 2022-09-26 | Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to pot… |
CVE-2022-2852 | High | 8.8 | 2022-09-26 | Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1941 | High | 7.5 | 2022-09-22 | A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for pr… |
CVE-2022-36027 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaul… |
CVE-2022-36017 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`, `requested_output_min`, `requested_output_max` t… |
CVE-2022-36016 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not exactly t… |
CVE-2022-36015 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `int64_t`, it crashes. We have patched the… |
CVE-2022-36014 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched th… |
CVE-2022-36013 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to convert NodeDefs without an op name, it… |
CVE-2022-36012 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it crashe… |
CVE-2022-36011 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives… |
CVE-2022-36005 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient` receives input `min` or `max` that is… |
CVE-2022-36004 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates, it gives a `CHECK` fail that can trigg… |
CVE-2022-36003 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that can trigg… |
CVE-2022-36002 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `CHECK` fail that can trigger a denial o… |
CVE-2022-36001 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is not of dtype `float`, it gives a `CHECK`… |
CVE-2022-36000 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it gives… |
CVE-2022-35999 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inputs (e.g. `[3, 1, 0, 1]`), the current… |
CVE-2022-35998 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with more than one dimension, it gives a `CH… |
CVE-2022-35997 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is not a scalar, it gives a `CHECK` fail th… |
CVE-2022-35996 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `Conv2D` is given empty `input` and the `filter` and `padding` sizes are valid, the output is al… |
CVE-2022-35995 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with more than one element, it gives a `CHECK… |
CVE-2022-35994 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it gives a `CHECK` fails that can be used… |
CVE-2022-35993 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1D tensor, it gives a `CHECK` fails that… |
CVE-2022-35992 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a rank greater than one, it gives a `CHE… |
CVE-2022-35991 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive an `element_shape` of a rank greater tha… |
CVE-2022-36026 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits` input tensor, it results in a `CHECK`… |
CVE-2022-36019 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `max` tensors of a rank other than one, it… |
CVE-2022-36018 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` list that contains tensors of ranks other… |
CVE-2022-35990 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_channel_gradient` receives input `min` or `m… |
CVE-2022-35989 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` with dimensions greater than its input te… |
CVE-2022-35988 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, the GPU kernel gives a `CHECK` fail that… |
CVE-2022-35987 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either have the same shape as its input tenso… |
CVE-2022-35986 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `RaggedBincount` is given an empty input tensor `splits`, it results in a segfault that can be u… |
CVE-2022-35985 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is not 4-D, it results in a `CHECK` fail… |
CVE-2022-35984 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `int32`. A valid `shape` of type `int64`… |
CVE-2022-35983 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsupported `dtype`, it results in a `CHECK` fa… |
CVE-2022-35982 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `SparseBincount` is given inputs for `indices`, `values`, and `dense_shape` that do not make a v… |
CVE-2022-35981 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` failures instead of with returning errors… |
CVE-2022-35979 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedRelu` or `QuantizedRelu6` are given nonscalar inputs for `min_features` or `max_featur… |
CVE-2022-35974 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizeDownAndShrinkRange` is given nonscalar inputs for `input_min` or `input_max`, it result… |
CVE-2022-35973 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedMatMul` is given nonscalar input for: `min_a`, `max_a`, `min_b`, or `max_b` It gives a… |
CVE-2022-35972 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedBiasAdd` is given `min_input`, `max_input`, `min_bias`, `max_bias` tensors of a nonzer… |
CVE-2022-35971 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it results in a `CH… |
CVE-2022-35970 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedInstanceNorm` is given `x_min` or `x_max` tensors of a nonzero rank, it results in a s… |
CVE-2022-35969 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. Otherwise… |
CVE-2022-35968 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate the input `orig_input_shape`. This resu… |
CVE-2022-35967 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedAdd` is given `min_input` or `max_input` tensors of a nonzero rank, it results in a se… |
CVE-2022-35966 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedAvgPool` is given `min_input` or `max_input` tensors of a nonzero rank, it results in… |
CVE-2022-35965 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an empty`sorted_inputs` input, it results in a `nullptr` d… |
CVE-2022-35964 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `BlockLSTMGradV2` does not fully validate its inputs. This results in a a seg… |
CVE-2022-35963 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_input_tensor_… |
CVE-2022-35960 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of… |
CVE-2022-35959 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_shape`. This… |
CVE-2022-35952 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A nonscalar `id… |
CVE-2022-35941 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not checked. A nega… |
CVE-2022-35940 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that is eventually used to construct a `Tens… |
CVE-2022-35939 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that determines the indices of of the output tenso… |
CVE-2022-35938 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inpu… |
CVE-2022-35937 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inpu… |
CVE-2022-35935 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (asserti… |
CVE-2022-35934 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-fa… |
CVE-2022-20364 | High | 7.8 | 2022-09-14 | In sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additio… |
CVE-2022-20231 | Medium | 6.7 | 2022-09-14 | In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privileg… |
CVE-2022-20399 | Medium | 5.5 | 2022-09-13 | In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local informa… |
CVE-2022-20398 | High | 7.8 | 2022-09-13 | In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass. This could lead to loca… |
CVE-2022-20396 | Medium | 5.5 | 2022-09-13 | In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due to a permissions by… |
CVE-2022-20395 | High | 7.8 | 2022-09-13 | In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no… |
CVE-2022-20393 | Medium | 5.5 | 2022-09-13 | In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local informati… |
CVE-2022-20392 | High | 7.8 | 2022-09-13 | In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent due to improper inpu… |
CVE-2022-20391 | Critical | 9.8 | 2022-09-13 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000 |
CVE-2022-20390 | Critical | 9.8 | 2022-09-13 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002 |
CVE-2022-20389 | Critical | 9.8 | 2022-09-13 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004 |
CVE-2022-20388 | Critical | 9.8 | 2022-09-13 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323 |
CVE-2022-20387 | Critical | 9.8 | 2022-09-13 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324 |
CVE-2022-20386 | Critical | 9.8 | 2022-09-13 | Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328 |
CVE-2022-20385 | Critical | 9.8 | 2022-09-13 | a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is… |
CVE-2021-0943 | High | 7.8 | 2022-09-13 | In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no addi… |
CVE-2021-0942 | Critical | 9.8 | 2022-09-13 | The path in this case is a little bit convoluted. The end result is that via an ioctl an untrusted app can control the ui32PageIndex offset in the expression:s… |
CVE-2021-0871 | High | 7.8 | 2022-09-13 | In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bound… |
CVE-2021-0697 | High | 7.0 | 2022-09-13 | In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2022-39119 | High | 7.8 | 2022-09-09 | In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2022-36866 | Medium | 4.0 | 2022-09-09 | Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows… |
CVE-2022-36865 | Medium | 4.0 | 2022-09-09 | Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to access device i… |