Page 77 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-21736 | High | 7.6 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it… |
CVE-2022-21733 | Medium | 4.3 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a denial of service attack by causing an o… |
CVE-2022-21732 | Medium | 4.3 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `ThreadPoolHandle` can be used to trigger a denial of service attack by allocati… |
CVE-2022-21731 | Medium | 6.5 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be used to trigger a denial of service attack… |
CVE-2022-21730 | High | 8.1 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensors are inva… |
CVE-2022-21728 | High | 8.1 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the value of `batc… |
CVE-2022-21727 | High | 7.6 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `Dequantize` is vulnerable to an integer overflow weakness… |
CVE-2022-21726 | High | 8.1 | 2022-02-03 | Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can result in heap… |
CVE-2021-22570 | Medium | 6.5 | 2022-01-26 | Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name du… |
CVE-2022-23258 | Medium | 4.3 | 2022-01-25 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2022-23728 | Medium | 6.1 | 2022-01-21 | Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011. |
CVE-2021-34406 | Medium | 4.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition can lead to a null pointer dereference, which may lead to a syst… |
CVE-2021-34405 | Medium | 5.5 | 2022-01-18 | NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an unchecked return value causing a null pointer dereference may l… |
CVE-2021-34404 | High | 7.1 | 2022-01-18 | Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA when BROM fails may allow an unprivileged… |
CVE-2021-34403 | High | 7.8 | 2022-01-18 | NVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a local account to exploit a use-after-free condition, leading to… |
CVE-2021-34402 | Medium | 6.7 | 2022-01-18 | NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location… |
CVE-2021-34401 | High | 7.8 | 2022-01-18 | NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER, where improper access control may lead to code execu… |
CVE-2021-22566 | Critical | 9.8 | 2022-01-18 | An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. T… |
CVE-2021-39684 | High | 7.8 | 2022-01-14 | In target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to local esc… |
CVE-2021-39683 | Medium | 6.7 | 2022-01-14 | In copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2021-39682 | High | 7.8 | 2022-01-14 | In mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of p… |
CVE-2021-39681 | High | 7.8 | 2022-01-14 | In delete_protocol of main.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no ad… |
CVE-2021-39680 | Medium | 4.4 | 2022-01-14 | In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure… |
CVE-2021-39679 | High | 7.0 | 2022-01-14 | In init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2021-39678 | High | 7.8 | 2022-01-14 | In <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This could lead to local escalation of privilege with no additional exe… |
CVE-2021-39659 | Medium | 5.5 | 2022-01-14 | In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled except… |
CVE-2021-39634 | High | 7.8 | 2022-01-14 | In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User in… |
CVE-2021-39633 | Medium | 5.5 | 2022-01-14 | In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no add… |
CVE-2021-39632 | High | 7.8 | 2022-01-14 | In inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no… |
CVE-2021-39630 | High | 7.8 | 2022-01-14 | In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could… |
CVE-2021-39629 | High | 7.0 | 2022-01-14 | In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privil… |
CVE-2021-39628 | Low | 3.3 | 2022-01-14 | In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local informat… |
CVE-2021-39627 | High | 7.8 | 2022-01-14 | In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to loca… |
CVE-2021-39626 | High | 7.8 | 2022-01-14 | In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of pr… |
CVE-2021-39625 | High | 7.3 | 2022-01-14 | In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe… |
CVE-2021-39623 | Critical | 9.8 | 2022-01-14 | In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privil… |
CVE-2021-39622 | High | 7.8 | 2022-01-14 | In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2021-39621 | High | 7.8 | 2022-01-14 | In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to loca… |
CVE-2021-39620 | High | 7.8 | 2022-01-14 | In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with… |
CVE-2021-39618 | High | 7.8 | 2022-01-14 | In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent… |
CVE-2021-1049 | Critical | 9.8 | 2022-01-14 | Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722 |
CVE-2021-1037 | Medium | 5.3 | 2022-01-14 | The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This le… |
CVE-2021-1036 | High | 7.8 | 2022-01-14 | In LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privileg… |
CVE-2021-1035 | High | 7.8 | 2022-01-14 | In setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to invoke an arbitrary broadcast receiver due to a confused deput… |
CVE-2021-0959 | High | 7.8 | 2022-01-14 | In jit_memory_region.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege w… |
CVE-2022-22286 | Medium | 4.4 | 2022-01-10 | A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to execute… |
CVE-2022-22285 | Medium | 4.4 | 2022-01-10 | A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute p… |
CVE-2022-22272 | Medium | 4.0 | 2022-01-10 | Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission |
CVE-2022-22271 | Medium | 5.5 | 2022-01-10 | A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary memory. |
CVE-2022-22270 | Medium | 4.4 | 2022-01-10 | An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information. |
CVE-2022-22269 | Medium | 4.0 | 2022-01-10 | Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applications to get a local Bluetooth MAC addr… |
CVE-2022-22268 | Medium | 6.1 | 2022-01-10 | Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX… |
CVE-2022-22267 | Medium | 4.0 | 2022-01-10 | Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information. |
CVE-2022-22266 | Medium | 4.0 | 2022-01-10 | (Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applica… |
CVE-2022-22265 | Medium | 5.0 | 2022-01-10 | An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution. |
CVE-2022-22264 | High | 7.7 | 2022-01-10 | Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permissi… |
CVE-2022-22263 | Medium | 4.0 | 2022-01-10 | Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity. |
CVE-2021-22569 | High | 7.5 | 2022-01-10 | An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small ma… |
CVE-2022-20023 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of… |
CVE-2022-20022 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the… |
CVE-2022-20021 | Medium | 6.5 | 2022-01-04 | In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lea… |
CVE-2022-20020 | Medium | 5.5 | 2022-01-04 | In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional e… |
CVE-2022-20019 | Medium | 5.5 | 2022-01-04 | In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additi… |
CVE-2022-20018 | Medium | 4.4 | 2022-01-04 | In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution p… |
CVE-2022-20016 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-20015 | Medium | 4.4 | 2022-01-04 | In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execu… |
CVE-2022-20014 | Medium | 6.7 | 2022-01-04 | In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution p… |
CVE-2022-20013 | Medium | 6.4 | 2022-01-04 | In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-20012 | High | 7.8 | 2022-01-04 | In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution… |
CVE-2021-43849 | Medium | 6.2 | 2021-12-23 | cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both Android 6+ and iOS. In versions prior… |
CVE-2021-4079 | High | 8.8 | 2021-12-23 | Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packet… |
CVE-2021-4078 | High | 8.8 | 2021-12-23 | Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4068 | Medium | 6.5 | 2021-12-23 | Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-4067 | High | 8.8 | 2021-12-23 | Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4066 | High | 8.8 | 2021-12-23 | Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4065 | High | 8.8 | 2021-12-23 | Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4064 | High | 8.8 | 2021-12-23 | Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a craf… |
CVE-2021-4063 | High | 8.8 | 2021-12-23 | Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2021-4062 | High | 8.8 | 2021-12-23 | Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploi… |
CVE-2021-4061 | High | 8.8 | 2021-12-23 | Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4059 | Medium | 6.5 | 2021-12-23 | Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-4058 | High | 8.8 | 2021-12-23 | Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4057 | High | 8.8 | 2021-12-23 | Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit hea… |
CVE-2021-4056 | High | 8.8 | 2021-12-23 | Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4055 | High | 8.8 | 2021-12-23 | Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentia… |
CVE-2021-4054 | Medium | 6.5 | 2021-12-23 | Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-4053 | High | 8.8 | 2021-12-23 | Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4052 | High | 8.8 | 2021-12-23 | Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially expl… |
CVE-2021-38022 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML… |
CVE-2021-38021 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML… |
CVE-2021-38020 | Medium | 4.3 | 2021-12-23 | Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omn… |
CVE-2021-38019 | Medium | 6.5 | 2021-12-23 | Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38018 | Medium | 6.5 | 2021-12-23 | Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-38017 | High | 8.8 | 2021-12-23 | Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a craf… |
CVE-2021-38016 | High | 8.8 | 2021-12-23 | Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted… |
CVE-2021-38015 | High | 8.8 | 2021-12-23 | Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypas… |
CVE-2021-38014 | High | 8.8 | 2021-12-23 | Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-38013 | Critical | 9.6 | 2021-12-23 | Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI render… |
CVE-2021-38012 | High | 8.8 | 2021-12-23 | Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38011 | High | 8.8 | 2021-12-23 | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |