Page 82 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25450 | Medium | 4.5 | 2021-09-09 | Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket. |
CVE-2021-25449 | Medium | 6.5 | 2021-09-09 | An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextra… |
CVE-2021-30605 | High | 7.8 | 2021-09-08 | Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacke… |
CVE-2021-38641 | Medium | 6.1 | 2021-09-02 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2021-26439 | Medium | 4.6 | 2021-09-02 | Microsoft Edge for Android Information Disclosure Vulnerability |
CVE-2021-30604 | High | 8.8 | 2021-08-26 | Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30603 | High | 7.5 | 2021-08-26 | Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30602 | High | 8.8 | 2021-08-26 | Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit h… |
CVE-2021-30601 | High | 8.8 | 2021-08-26 | Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potential… |
CVE-2021-30600 | High | 8.8 | 2021-08-26 | Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2021-30599 | High | 8.8 | 2021-08-26 | Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2021-30598 | High | 8.8 | 2021-08-26 | Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2021-30597 | Medium | 6.8 | 2021-08-26 | Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical ac… |
CVE-2021-30596 | Medium | 4.3 | 2021-08-26 | Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar)… |
CVE-2021-30594 | Medium | 6.8 | 2021-08-26 | Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to… |
CVE-2021-30593 | High | 8.1 | 2021-08-26 | Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an… |
CVE-2021-30592 | High | 8.8 | 2021-08-26 | Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform… |
CVE-2021-30591 | High | 8.8 | 2021-08-26 | Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-30590 | High | 8.8 | 2021-08-26 | Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-0628 | Medium | 6.7 | 2021-08-18 | In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution priv… |
CVE-2021-0627 | Medium | 6.7 | 2021-08-18 | In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-0626 | Medium | 6.7 | 2021-08-18 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-0420 | Medium | 5.5 | 2021-08-18 | In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional exec… |
CVE-2021-0419 | Medium | 5.5 | 2021-08-18 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional e… |
CVE-2021-0418 | Medium | 5.5 | 2021-08-18 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional e… |
CVE-2021-0417 | Medium | 5.5 | 2021-08-18 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional e… |
CVE-2021-0416 | Medium | 5.5 | 2021-08-18 | In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional e… |
CVE-2021-0415 | Medium | 5.5 | 2021-08-18 | In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with… |
CVE-2021-0408 | Medium | 5.5 | 2021-08-18 | In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional e… |
CVE-2021-0407 | Medium | 6.7 | 2021-08-18 | In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2021-29983 | Medium | 6.5 | 2021-08-17 | Firefox for Android could get stuck in fullscreen mode and not exit it even after normal interactions that should cause it to exit. *Note: This issue only affe… |
CVE-2021-0646 | High | 7.8 | 2021-08-17 | In sqlite3_str_vappendf of sqlite3.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privileg… |
CVE-2021-0645 | High | 7.8 | 2021-08-17 | In shouldBlockFromTree of ExternalStorageProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege, allowing an a… |
CVE-2021-0642 | Medium | 5.5 | 2021-08-17 | In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check… |
CVE-2021-0641 | Medium | 5.5 | 2021-08-17 | In getAvailableSubscriptionInfoList of SubscriptionController.java, there is a possible disclosure of unique identifiers due to a missing permission check. Thi… |
CVE-2021-0640 | High | 7.8 | 2021-08-17 | In noteAtomLogged of StatsdStats.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege w… |
CVE-2021-0639 | Medium | 5.5 | 2021-08-17 | In multiple functions of libl3oemcrypto.cpp, there is a possible weakness in the existing obfuscation mechanism due to the way sensitive data is handled. This… |
CVE-2021-0593 | High | 7.8 | 2021-08-17 | In sendDevicePickedIntent of DevicePickerFragment.java, there is a possible way to invoke a privileged broadcast receiver due to a confused deputy. This could… |
CVE-2021-0591 | High | 7.3 | 2021-08-17 | In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. Th… |
CVE-2021-0584 | Medium | 5.5 | 2021-08-17 | In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosur… |
CVE-2021-0582 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0581 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0580 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0579 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0578 | Medium | 6.5 | 2021-08-17 | In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker w… |
CVE-2021-0576 | High | 7.8 | 2021-08-17 | In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0574 | High | 7.8 | 2021-08-17 | In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0573 | High | 7.8 | 2021-08-17 | In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0519 | High | 7.8 | 2021-08-17 | In BITSTREAM_FLUSH of ih264e_bitstream.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosur… |
CVE-2021-37690 | Medium | 6.6 | 2021-08-13 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (such as `MutableHashT… |
CVE-2021-37692 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string… |
CVE-2021-37691 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a division… |
CVE-2021-37687 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://github.com/tensorflow/… |
CVE-2021-37685 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tensorflow/tensorflo… |
CVE-2021-37684 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooling in TFLite are vulnerable to division… |
CVE-2021-37683 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of division in TFLite is [vulnerable to a divisi… |
CVE-2021-37682 | Medium | 4.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made to use unit… |
CVE-2021-37679 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf.map_fn` within another `tf.map_fn` cal… |
CVE-2021-37678 | Critical | 9.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary code execu… |
CVE-2021-37677 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for `tf.raw_ops.Dequantize` has a vulnerab… |
CVE-2021-37674 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a segmentation faul… |
CVE-2021-37673 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a `CHECK`-fail in `… |
CVE-2021-37672 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data… |
CVE-2021-37670 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data… |
CVE-2021-37669 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications serving mod… |
CVE-2021-37668 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications serving mod… |
CVE-2021-37665 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation in MKL implementation of requantizatio… |
CVE-2021-37663 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation in `tf.raw_ops.QuantizeV2`, an attacke… |
CVE-2021-37689 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null poin… |
CVE-2021-37688 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null poin… |
CVE-2021-37686 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which ca… |
CVE-2021-37681 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulnerable to a null point… |
CVE-2021-37680 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of fully connected layers in TFLite is [vulnerab… |
CVE-2021-37676 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37675 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions most implementations of convolution operators in TensorFlow are aff… |
CVE-2021-37671 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37667 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37666 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37652 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.BoostedTreesCreateEnsemble` can… |
CVE-2021-37648 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for `tf.raw_ops.SaveV2` does not properly validate the inp… |
CVE-2021-37664 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data… |
CVE-2021-37662 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can generate undefined behavior via a reference binding… |
CVE-2021-37661 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a denial of service in `boosted_trees_create_… |
CVE-2021-37659 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37658 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37657 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37656 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to… |
CVE-2021-37655 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a read from outside of bounds of heap alloc… |
CVE-2021-37654 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a `CHECK`-fail in debug builds… |
CVE-2021-37651 | High | 7.1 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.FractionalAvgPoolGrad` can be tr… |
CVE-2021-37650 | High | 7.8 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.ExperimentalDatasetToTFRecord` a… |
CVE-2021-37646 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.StringNGrams` is vulnerable to an… |
CVE-2021-37645 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` is v… |
CVE-2021-37644 | Medium | 5.5 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions providing a negative element to `num_elements` list argument of `tf… |
CVE-2021-37641 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions if the arguments to `tf.raw_ops.RaggedGather` don't determine a val… |
CVE-2021-37635 | High | 7.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of sparse reduction operations in TensorFlow can… |
CVE-2021-37649 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. The code for `tf.raw_ops.UncompressElement` can be made to trigger a null pointer derefe… |
CVE-2021-37647 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, `tf.raw_ops… |
CVE-2021-37643 | High | 7.7 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to `tf.raw_ops.MatrixDiagPartOp`, then… |
CVE-2021-37639 | High | 8.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can… |