Page 66 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36863 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release… |
CVE-2022-36862 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 al… |
CVE-2022-36861 | Medium | 5.9 | 2022-09-09 | Custom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows attacker to use some protected functions with SystemUI privilege. |
CVE-2022-36860 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows atta… |
CVE-2022-36858 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Relea… |
CVE-2022-36857 | Low | 1.9 | 2022-09-09 | Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data. |
CVE-2022-36856 | Medium | 4.0 | 2022-09-09 | Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via undefined permission. |
CVE-2022-36855 | Medium | 4.4 | 2022-09-09 | A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. |
CVE-2022-36854 | Medium | 4.0 | 2022-09-09 | Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information. |
CVE-2022-36853 | Low | 3.3 | 2022-09-09 | Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information. |
CVE-2022-36852 | Low | 1.9 | 2022-09-09 | Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data. |
CVE-2022-36850 | Medium | 4.0 | 2022-09-09 | Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid. |
CVE-2022-36849 | Medium | 4.9 | 2022-09-09 | Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious act… |
CVE-2022-36848 | Medium | 5.1 | 2022-09-09 | Improper Authorization vulnerability in setDualDARPolicyCmd prior to SMR Sep-2022 Release 1 allows local attackers to cause local permanent denial of service. |
CVE-2022-36847 | Medium | 4.9 | 2022-09-09 | Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions. |
CVE-2022-36846 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows… |
CVE-2022-36845 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows a… |
CVE-2022-36844 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allo… |
CVE-2022-36843 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows a… |
CVE-2022-36842 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows… |
CVE-2022-36841 | Medium | 4.4 | 2022-09-09 | A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 al… |
CVE-2022-26470 | Medium | 6.7 | 2022-09-06 | In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26469 | High | 7.8 | 2022-09-06 | In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with no additional executi… |
CVE-2022-26468 | Medium | 6.6 | 2022-09-06 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-26467 | Medium | 6.7 | 2022-09-06 | In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26466 | Medium | 6.7 | 2022-09-06 | In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26465 | Medium | 6.7 | 2022-09-06 | In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-26464 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26463 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2022-26462 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2022-26461 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-26460 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26459 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges nee… |
CVE-2022-26458 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-26457 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-26456 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local information disclosure with System execution priv… |
CVE-2022-26455 | Medium | 6.7 | 2022-09-06 | In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-26454 | Medium | 6.7 | 2022-09-06 | In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-26453 | Medium | 6.7 | 2022-09-06 | In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2022-26451 | Medium | 6.7 | 2022-09-06 | In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-26450 | Medium | 6.4 | 2022-09-06 | In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-26449 | Medium | 6.7 | 2022-09-06 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26448 | Medium | 6.7 | 2022-09-06 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26447 | Critical | 9.8 | 2022-09-06 | In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pr… |
CVE-2022-26529 | Medium | 6.5 | 2022-08-30 | Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for segmented packets’ link parameter. An unauthent… |
CVE-2022-26528 | Medium | 6.5 | 2022-08-30 | Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift paramete… |
CVE-2022-26527 | Medium | 6.5 | 2022-08-30 | Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parame… |
CVE-2022-25635 | Medium | 6.5 | 2022-08-30 | Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet length. An unauthentic… |
CVE-2022-20122 | Critical | 9.8 | 2022-08-24 | The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU… |
CVE-2021-39815 | Critical | 9.8 | 2022-08-24 | The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the page in GPU… |
CVE-2021-0947 | High | 7.5 | 2022-08-24 | The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and then copies t… |
CVE-2021-0946 | High | 7.5 | 2022-08-24 | The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and then copi… |
CVE-2021-0891 | High | 7.5 | 2022-08-24 | An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Android SoCAndro… |
CVE-2021-0887 | Medium | 5.5 | 2022-08-24 | In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosur… |
CVE-2021-0698 | Medium | 5.5 | 2022-08-24 | In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure w… |
CVE-2022-2624 | High | 8.8 | 2022-08-12 | Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to p… |
CVE-2022-2623 | High | 8.8 | 2022-08-12 | Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
CVE-2022-2622 | Medium | 6.5 | 2022-08-12 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download res… |
CVE-2022-2621 | High | 8.8 | 2022-08-12 | Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-2620 | High | 8.8 | 2022-08-12 | Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
CVE-2022-2619 | Medium | 4.3 | 2022-08-12 | Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious… |
CVE-2022-2618 | Medium | 6.5 | 2022-08-12 | Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a… |
CVE-2022-2617 | High | 8.8 | 2022-08-12 | Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2022-2616 | Medium | 6.5 | 2022-08-12 | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extensio… |
CVE-2022-2615 | Medium | 6.5 | 2022-08-12 | Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-2614 | High | 8.8 | 2022-08-12 | Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2613 | High | 8.8 | 2022-08-12 | Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interacti… |
CVE-2022-2612 | Medium | 6.5 | 2022-08-12 | Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process t… |
CVE-2022-2611 | Medium | 4.3 | 2022-08-12 | Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibo… |
CVE-2022-2610 | Medium | 6.5 | 2022-08-12 | Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted H… |
CVE-2022-2609 | High | 8.8 | 2022-08-12 | Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user i… |
CVE-2022-2608 | High | 8.8 | 2022-08-12 | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user… |
CVE-2022-2607 | High | 8.8 | 2022-08-12 | Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user inte… |
CVE-2022-2606 | High | 8.8 | 2022-08-12 | Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise po… |
CVE-2022-2605 | Medium | 6.5 | 2022-08-12 | Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2604 | High | 8.8 | 2022-08-12 | Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2022-2603 | High | 8.8 | 2022-08-12 | Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2587 | Critical | 9.8 | 2022-08-12 | Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corru… |
CVE-2022-20362 | High | 8.8 | 2022-08-12 | In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no additional ex… |
CVE-2022-20342 | Low | 3.3 | 2022-08-12 | In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. This could lead to local information disclosure with… |
CVE-2022-20341 | Medium | 5.5 | 2022-08-12 | In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of… |
CVE-2022-20340 | Low | 3.3 | 2022-08-12 | In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. This could lead to lo… |
CVE-2022-20339 | Low | 3.3 | 2022-08-12 | In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information di… |
CVE-2022-20338 | Low | 3.3 | 2022-08-12 | In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local e… |
CVE-2022-20336 | Low | 3.3 | 2022-08-12 | In Settings, there is a possible installed application disclosure due to a missing permission check. This could lead to local information disclosure of applica… |
CVE-2022-20335 | Low | 3.3 | 2022-08-12 | In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check. This could lead t… |
CVE-2022-20334 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there are possible process crashes due to dereferencing a null pointer. This could lead to remote denial of service with no additional execution… |
CVE-2022-20333 | Medium | 6.5 | 2022-08-12 | In Bluetooth, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed… |
CVE-2022-20332 | Medium | 5.5 | 2022-08-12 | In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. Thi… |
CVE-2022-20331 | High | 7.8 | 2022-08-12 | In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. This could lead to local escalation… |
CVE-2022-20330 | Low | 3.5 | 2022-08-12 | In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. This could lead to l… |
CVE-2022-20329 | High | 7.8 | 2022-08-12 | In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. This could lead to local escalation of privilege with no… |
CVE-2022-20328 | Low | 3.3 | 2022-08-12 | In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. This could lead to local information dis… |
CVE-2022-20327 | Low | 2.8 | 2022-08-12 | In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. This could lead to local informatio… |
CVE-2022-20326 | Medium | 5.5 | 2022-08-12 | In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. This could lead to local information disclosure with User ex… |
CVE-2022-20325 | High | 7.8 | 2022-08-12 | In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges… |
CVE-2022-20324 | Medium | 5.5 | 2022-08-12 | In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This cou… |
CVE-2022-20323 | Medium | 5.5 | 2022-08-12 | In PackageManager, there is a possible package installation disclosure due to a missing permission check. This could lead to local information disclosure with… |
CVE-2022-20322 | Medium | 5.5 | 2022-08-12 | In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no… |
CVE-2022-20321 | Low | 3.3 | 2022-08-12 | In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission check. This could lead… |