Page 84 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0539 | High | 7.8 | 2021-06-22 | In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check… |
CVE-2021-0538 | High | 7.3 | 2021-06-22 | In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to… |
CVE-2021-0537 | High | 7.3 | 2021-06-22 | In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay attack. This could lead… |
CVE-2021-0536 | High | 7.8 | 2021-06-22 | In dropFile of WiFiInstaller, there is a way to delete files accessible to CertInstaller due to a confused deputy. This could lead to local escalation of privi… |
CVE-2021-0572 | Medium | 5.5 | 2021-06-22 | In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information dis… |
CVE-2021-0571 | High | 7.8 | 2021-06-22 | In ActivityTaskManagerService.startActivity() and AppTaskImpl.startActivity() of ActivityTaskManagerService.java and AppTaskImpl.java, there is possible access… |
CVE-2021-0570 | High | 7.8 | 2021-06-22 | In sendBugreportNotification of BugreportProgressService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local e… |
CVE-2021-0569 | Medium | 5.0 | 2021-06-22 | In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosu… |
CVE-2021-0568 | High | 7.8 | 2021-06-22 | In onReceive of DevicePolicyManagerService.java, there is a possible enabling of disabled profiles due to a missing permission check. This could lead to local… |
CVE-2021-0567 | High | 7.8 | 2021-06-22 | In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege… |
CVE-2021-0566 | Medium | 4.4 | 2021-06-22 | In accessAudioHalPidscpp of TimeCheck.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2021-0565 | High | 7.0 | 2021-06-22 | In wrapUserThread of AudioStream.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no addi… |
CVE-2021-0564 | Medium | 6.4 | 2021-06-22 | In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execut… |
CVE-2021-0563 | Medium | 5.5 | 2021-06-22 | In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local informati… |
CVE-2021-0562 | Medium | 5.5 | 2021-06-22 | In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2021-0561 | Medium | 5.5 | 2021-06-22 | In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local info… |
CVE-2021-0559 | Medium | 6.5 | 2021-06-22 | In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no addi… |
CVE-2021-0558 | Medium | 6.5 | 2021-06-22 | In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information discl… |
CVE-2021-0557 | High | 8.8 | 2021-06-22 | In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional exe… |
CVE-2021-0556 | Medium | 5.5 | 2021-06-22 | In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no… |
CVE-2021-0555 | High | 7.5 | 2021-06-22 | In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no addi… |
CVE-2021-0554 | Medium | 5.5 | 2021-06-22 | In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2021-0535 | Medium | 6.7 | 2021-06-22 | In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv… |
CVE-2021-0534 | High | 7.8 | 2021-06-22 | In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to l… |
CVE-2021-0533 | High | 7.0 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2021-0532 | High | 7.0 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2021-0531 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2021-0530 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0529 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional… |
CVE-2021-0528 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0527 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2021-0526 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0525 | High | 7.8 | 2021-06-21 | In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no addition… |
CVE-2021-0523 | High | 7.3 | 2021-06-21 | In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay attack. This could… |
CVE-2021-0522 | High | 7.5 | 2021-06-21 | In ConnectionHandler::SdpCb of connection_handler.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information dis… |
CVE-2021-0521 | Medium | 5.5 | 2021-06-21 | In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information… |
CVE-2021-0520 | High | 7.0 | 2021-06-21 | In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation… |
CVE-2021-0517 | High | 7.5 | 2021-06-21 | In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead… |
CVE-2021-0516 | Critical | 9.8 | 2021-06-21 | In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of pri… |
CVE-2021-0513 | High | 7.8 | 2021-06-21 | In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation… |
CVE-2021-0512 | High | 7.8 | 2021-06-21 | In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local esc… |
CVE-2021-0511 | High | 7.8 | 2021-06-21 | In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privi… |
CVE-2021-0510 | High | 7.8 | 2021-06-21 | In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2021-0509 | High | 7.0 | 2021-06-21 | In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… |
CVE-2021-0508 | High | 7.0 | 2021-06-21 | In various functions of DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no add… |
CVE-2021-0507 | High | 8.8 | 2021-06-21 | In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bl… |
CVE-2021-0506 | High | 7.3 | 2021-06-21 | In ActivityPicker.java, there is a possible bypass of user interaction in intent resolution due to a tapjacking/overlay attack. This could lead to local escala… |
CVE-2021-0505 | High | 7.8 | 2021-06-21 | In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check. This could lead to local escalation of privilege wi… |
CVE-2021-0504 | Medium | 6.5 | 2021-06-21 | In avrc_pars_browse_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… |
CVE-2021-0478 | High | 7.8 | 2021-06-21 | In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privile… |
CVE-2021-30553 | High | 8.8 | 2021-06-15 | Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2021-30552 | High | 8.8 | 2021-06-15 | Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2021-30551 | High | 8.8 | 2021-06-15 | Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30550 | High | 8.8 | 2021-06-15 | Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentiall… |
CVE-2021-30549 | High | 8.8 | 2021-06-15 | Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2021-30548 | High | 8.8 | 2021-06-15 | Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30547 | High | 8.8 | 2021-06-15 | Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2021-30546 | High | 8.8 | 2021-06-15 | Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30545 | High | 8.8 | 2021-06-15 | Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2021-30544 | High | 8.8 | 2021-06-15 | Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-0467 | Medium | 6.8 | 2021-06-14 | In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootlo… |
CVE-2021-0324 | Critical | 9.8 | 2021-06-14 | Product: AndroidVersions: Android SoCAndroid ID: A-175402462 |
CVE-2021-0498 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional ex… |
CVE-2021-0497 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2021-0496 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional… |
CVE-2021-0495 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with no additi… |
CVE-2021-0494 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no addit… |
CVE-2021-0493 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no ad… |
CVE-2021-0492 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no ad… |
CVE-2021-0491 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege wi… |
CVE-2021-0490 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no ad… |
CVE-2021-0489 | High | 7.8 | 2021-06-11 | In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no ad… |
CVE-2021-0487 | High | 7.8 | 2021-06-11 | In onCreate of CalendarDebugActivity.java, there is a possible way to export calendar data to the sdcard without user consent due to a tapjacking/overlay attac… |
CVE-2021-0485 | High | 7.8 | 2021-06-11 | In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to a permissions bypass. This could lead t… |
CVE-2021-0484 | Medium | 5.5 | 2021-06-11 | In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disc… |
CVE-2021-0482 | High | 7.0 | 2021-06-11 | In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with n… |
CVE-2021-0481 | High | 7.8 | 2021-06-11 | In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to loca… |
CVE-2021-0480 | Medium | 5.5 | 2021-06-11 | In createPendingIntent of SnoozeHelper.java, there is a possible broadcast intent containing a sensitive identifier. This could lead to local information discl… |
CVE-2021-0477 | High | 7.8 | 2021-06-11 | In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to lo… |
CVE-2021-0476 | High | 7.0 | 2021-06-11 | In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additio… |
CVE-2021-0475 | High | 8.8 | 2021-06-11 | In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead to remote code execution over Bluetoot… |
CVE-2021-0474 | Critical | 9.8 | 2021-06-11 | In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no addit… |
CVE-2021-0473 | High | 8.8 | 2021-06-11 | In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remote code execution over NFC with no addi… |
CVE-2021-0472 | High | 7.8 | 2021-06-11 | In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a permissions bypass. This could lead to loc… |
CVE-2021-0466 | High | 7.5 | 2021-06-11 | In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure… |
CVE-2019-9475 | Medium | 5.5 | 2021-06-11 | In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local information disclosure with n… |
CVE-2021-25417 | High | 7.5 | 2021-06-11 | Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage. |
CVE-2021-25416 | Medium | 6.5 | 2021-06-11 | Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outs… |
CVE-2021-25415 | Medium | 5.5 | 2021-06-11 | Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable. |
CVE-2021-25414 | High | 7.8 | 2021-06-11 | Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with S… |
CVE-2021-25413 | Medium | 5.5 | 2021-06-11 | Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbitrary data… |
CVE-2021-25412 | High | 7.8 | 2021-06-11 | An improper access control vulnerability in genericssoservice prior to SMR JUN-2021 Release 1 allows local attackers to execute protected activity with system… |
CVE-2021-25411 | Medium | 4.4 | 2021-06-11 | Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory. |
CVE-2021-25410 | High | 7.1 | 2021-06-11 | Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated pri… |
CVE-2021-25409 | Low | 2.4 | 2021-06-11 | Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically conf… |
CVE-2021-25408 | High | 7.8 | 2021-06-11 | A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution. |
CVE-2021-25407 | High | 7.8 | 2021-06-11 | A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write. |
CVE-2021-25403 | Low | 3.3 | 2021-06-11 | Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows att… |
CVE-2021-25397 | Medium | 6.8 | 2021-06-11 | An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process vi… |
CVE-2021-25396 | Medium | 6.7 | 2021-06-11 | An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution. |