Page 89 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21129 | Medium | 6.5 | 2021-02-09 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a cra… |
CVE-2021-21128 | High | 8.8 | 2021-02-09 | Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21127 | High | 8.8 | 2021-02-09 | Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted… |
CVE-2021-21126 | Medium | 6.5 | 2021-02-09 | Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Ex… |
CVE-2021-21125 | High | 8.1 | 2021-02-09 | Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restriction… |
CVE-2021-21124 | Critical | 9.6 | 2021-02-09 | Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc… |
CVE-2021-21123 | Medium | 6.5 | 2021-02-09 | Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafte… |
CVE-2021-21122 | High | 8.8 | 2021-02-09 | Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21121 | Critical | 9.6 | 2021-02-09 | Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2021-21120 | High | 8.8 | 2021-02-09 | Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21119 | High | 8.8 | 2021-02-09 | Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c… |
CVE-2021-21118 | High | 8.8 | 2021-02-09 | Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a cr… |
CVE-2021-21117 | High | 7.8 | 2021-02-09 | Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a cr… |
CVE-2020-16044 | High | 8.8 | 2021-02-09 | Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet. |
CVE-2020-11836 | Medium | 5.5 | 2021-02-06 | OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or… |
CVE-2021-0351 | High | 7.5 | 2021-02-04 | In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privil… |
CVE-2021-0350 | Medium | 4.4 | 2021-02-04 | In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges neede… |
CVE-2021-0349 | Medium | 6.7 | 2021-02-04 | In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0348 | Medium | 6.7 | 2021-02-04 | In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2021-0347 | Medium | 4.4 | 2021-02-04 | In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2021-0346 | Medium | 6.7 | 2021-02-04 | In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0345 | Medium | 6.7 | 2021-02-04 | In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System exe… |
CVE-2021-0344 | Medium | 6.7 | 2021-02-04 | In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0343 | Medium | 6.7 | 2021-02-04 | In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2021-26689 | Critical | 9.8 | 2021-02-04 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-2000… |
CVE-2021-26688 | Critical | 9.8 | 2021-02-04 | An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 (… |
CVE-2021-26687 | Critical | 9.8 | 2021-02-04 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishand… |
CVE-2021-0365 | Medium | 6.7 | 2021-02-03 | In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0364 | Medium | 6.7 | 2021-02-03 | In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution… |
CVE-2021-0363 | Medium | 6.7 | 2021-02-03 | In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2021-0362 | Medium | 6.7 | 2021-02-03 | In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-0361 | Medium | 6.7 | 2021-02-03 | In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privil… |
CVE-2021-0360 | Medium | 6.7 | 2021-02-03 | In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2021-0359 | Medium | 6.7 | 2021-02-03 | In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2021-0358 | Medium | 6.7 | 2021-02-03 | In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution priv… |
CVE-2021-0357 | Medium | 6.7 | 2021-02-03 | In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2021-0356 | Medium | 6.7 | 2021-02-03 | In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution priv… |
CVE-2021-0355 | Medium | 6.7 | 2021-02-03 | In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-0354 | Medium | 6.7 | 2021-02-03 | In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2021-0353 | Medium | 6.7 | 2021-02-03 | In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2021-0352 | Medium | 4.4 | 2021-02-03 | In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges n… |
CVE-2020-27098 | Medium | 5.5 | 2021-01-26 | In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead to local in… |
CVE-2020-27097 | Medium | 5.5 | 2021-01-26 | In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure with no add… |
CVE-2020-0236 | High | 7.5 | 2021-01-26 | In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This could lead to remote information discl… |
CVE-2020-8567 | Medium | 4.9 | 2021-01-21 | Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can creat… |
CVE-2021-1069 | Medium | 6.1 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer referen… |
CVE-2021-1068 | High | 7.8 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory locatio… |
CVE-2021-1067 | Medium | 6.8 | 2021-01-20 | NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attacker can write to the… |
CVE-2020-6572 | High | 8.8 | 2021-01-14 | Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2020-16046 | Medium | 6.1 | 2021-01-14 | Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
CVE-2020-16045 | Critical | 9.6 | 2021-01-14 | Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2021-0322 | Medium | 5.0 | 2021-01-11 | In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local informa… |
CVE-2021-0321 | Medium | 5.5 | 2021-01-11 | In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel informati… |
CVE-2021-0320 | Medium | 4.7 | 2021-01-11 | In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys du… |
CVE-2021-0319 | High | 7.3 | 2021-01-11 | In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate perm… |
CVE-2021-0318 | High | 7.8 | 2021-01-11 | In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation… |
CVE-2021-0317 | High | 7.8 | 2021-01-11 | In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of pri… |
CVE-2021-0316 | Critical | 9.8 | 2021-01-11 | In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution ove… |
CVE-2021-0315 | High | 7.3 | 2021-01-11 | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/o… |
CVE-2021-0313 | High | 7.5 | 2021-01-11 | In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial… |
CVE-2021-0312 | Medium | 6.5 | 2021-01-11 | In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure wi… |
CVE-2021-0311 | Medium | 6.5 | 2021-01-11 | In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to rem… |
CVE-2021-0310 | High | 7.8 | 2021-01-11 | In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv… |
CVE-2021-0309 | Medium | 5.5 | 2021-01-11 | In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access with no addit… |
CVE-2021-0308 | Medium | 6.8 | 2021-01-11 | In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wit… |
CVE-2021-0307 | High | 7.8 | 2021-01-11 | In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could… |
CVE-2021-0306 | High | 7.8 | 2021-01-11 | In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain… |
CVE-2021-0304 | Medium | 5.5 | 2021-01-11 | In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information discl… |
CVE-2021-0303 | High | 7.0 | 2021-01-11 | In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race… |
CVE-2021-0301 | Medium | 6.7 | 2021-01-11 | In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0471 | Critical | 9.8 | 2021-01-11 | In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input vali… |
CVE-2021-0342 | Medium | 6.7 | 2021-01-11 | In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution p… |
CVE-2020-27059 | High | 7.8 | 2021-01-11 | In onAuthenticated of AuthenticationClient.java, there is a possible tapjacking attack when requesting the user's fingerprint due to an overlaid window. This c… |
CVE-2021-21116 | High | 8.8 | 2021-01-08 | Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21115 | Critical | 9.6 | 2021-01-08 | User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perf… |
CVE-2021-21114 | High | 8.8 | 2021-01-08 | Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21113 | High | 8.8 | 2021-01-08 | Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21112 | High | 8.8 | 2021-01-08 | Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-21111 | Critical | 9.6 | 2021-01-08 | Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to p… |
CVE-2021-21110 | Critical | 9.6 | 2021-01-08 | Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa… |
CVE-2021-21109 | Critical | 9.6 | 2021-01-08 | Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2021-21108 | Critical | 9.6 | 2021-01-08 | Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2021-21107 | Critical | 9.6 | 2021-01-08 | Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentia… |
CVE-2021-21106 | Critical | 9.6 | 2021-01-08 | Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2020-16043 | High | 8.8 | 2021-01-08 | Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicio… |
CVE-2020-16042 | Medium | 6.5 | 2021-01-08 | Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a… |
CVE-2020-16041 | High | 8.1 | 2021-01-08 | Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentiall… |
CVE-2020-16040 | Medium | 6.5 | 2021-01-08 | Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2020-16039 | High | 8.8 | 2021-01-08 | Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16038 | High | 8.8 | 2021-01-08 | Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16037 | High | 8.8 | 2021-01-08 | Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16036 | Medium | 6.5 | 2021-01-08 | Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page. |
CVE-2020-16035 | High | 8.8 | 2021-01-08 | Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process… |
CVE-2020-16034 | Medium | 4.3 | 2021-01-08 | Inappropriate implementation in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a local attacker to bypass policy restrictions via a crafted HTML page. |
CVE-2020-16033 | Medium | 4.3 | 2021-01-08 | Inappropriate implementation in WebUSB in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-16032 | Medium | 4.3 | 2021-01-08 | Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a c… |
CVE-2020-16031 | Medium | 4.3 | 2021-01-08 | Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafte… |
CVE-2020-16030 | Medium | 6.1 | 2021-01-08 | Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted… |
CVE-2020-16029 | High | 8.8 | 2021-01-08 | Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF fil… |
CVE-2020-16028 | High | 8.8 | 2021-01-08 | Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |