Page 90 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-16027 | Medium | 6.5 | 2021-01-08 | Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2020-16026 | High | 8.8 | 2021-01-08 | Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16025 | Critical | 9.6 | 2021-01-08 | Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perf… |
CVE-2020-16024 | Critical | 9.6 | 2021-01-08 | Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2020-16023 | High | 8.8 | 2021-01-08 | Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16022 | High | 8.8 | 2021-01-08 | Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a cr… |
CVE-2020-16021 | High | 7.5 | 2021-01-08 | Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level p… |
CVE-2020-16020 | High | 8.8 | 2021-01-08 | Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process… |
CVE-2020-16019 | High | 8.8 | 2021-01-08 | Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process… |
CVE-2020-16018 | Critical | 9.6 | 2021-01-08 | Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2020-16017 | Critical | 9.6 | 2021-01-08 | Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perf… |
CVE-2020-16016 | Critical | 9.6 | 2021-01-08 | Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2020-16015 | High | 8.8 | 2021-01-08 | Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2020-16014 | Critical | 9.6 | 2021-01-08 | Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… |
CVE-2020-16013 | High | 8.8 | 2021-01-08 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2020-16012 | Medium | 4.3 | 2021-01-08 | Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-3011 | Medium | 4.2 | 2021-01-07 | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with C… |
CVE-2021-3022 | Medium | 5.5 | 2021-01-05 | An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-20… |
CVE-2021-22495 | Medium | 5.5 | 2021-01-05 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) (Exynos chipsets) software. The Mali GPU driver allows out-of-bound… |
CVE-2021-22494 | Medium | 5.5 | 2021-01-05 | An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q(10.0) software. When a screen protector is used, the required image… |
CVE-2021-22492 | High | 8.8 | 2021-01-05 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buff… |
CVE-2020-35864 | High | 7.5 | 2020-12-31 | An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks. |
CVE-2019-25004 | Critical | 9.8 | 2020-12-31 | An issue was discovered in the flatbuffers crate before 0.6.1 for Rust. Arbitrary bytes can be reinterpreted as a bool, defeating soundness. |
CVE-2020-35693 | High | 8.8 | 2020-12-24 | On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently… |
CVE-2020-35555 | High | 7.8 | 2020-12-18 | An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported, the device does not lock upon disconne… |
CVE-2020-35554 | High | 7.8 | 2020-12-18 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL error-handler vulnerability. The LG ID is L… |
CVE-2020-35553 | High | 7.5 | 2020-12-18 | An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They allows attackers to cause a denial of serv… |
CVE-2020-35552 | Medium | 5.3 | 2020-12-18 | An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. Attackers can obtain sen… |
CVE-2020-35551 | Critical | 9.8 | 2020-12-18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-chang… |
CVE-2020-35550 | Critical | 9.8 | 2020-12-18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via S… |
CVE-2020-35549 | Medium | 5.5 | 2020-12-18 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, withou… |
CVE-2020-35548 | Medium | 5.5 | 2020-12-18 | An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of serv… |
CVE-2020-27068 | Critical | 9.8 | 2020-12-15 | Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel |
CVE-2020-27067 | Medium | 6.4 | 2020-12-15 | In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2020-27066 | Medium | 6.7 | 2020-12-15 | In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of privile… |
CVE-2020-27057 | Low | 3.3 | 2020-12-15 | In getGpuStatsGlobalInfo and getGpuStatsAppInfo of GpuService.cpp, there is a possible permission bypass due to a missing permission check. This could lead to… |
CVE-2020-27056 | Low | 3.3 | 2020-12-15 | In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of package metadata with no additional executi… |
CVE-2020-27055 | High | 7.5 | 2020-12-15 | In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configurat… |
CVE-2020-27054 | High | 7.8 | 2020-12-15 | In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional exe… |
CVE-2020-27053 | Medium | 4.4 | 2020-12-15 | In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to… |
CVE-2020-27052 | High | 7.8 | 2020-12-15 | In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This could lead to… |
CVE-2020-27051 | High | 7.8 | 2020-12-15 | In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pr… |
CVE-2020-27050 | High | 7.8 | 2020-12-15 | In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation… |
CVE-2020-27049 | High | 7.8 | 2020-12-15 | In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2020-27048 | High | 7.8 | 2020-12-15 | In RW_SendRawFrame of rw_main.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with… |
CVE-2020-27047 | Medium | 5.5 | 2020-12-15 | In ce_t4t_update_binary of ce_t4t.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wit… |
CVE-2020-27046 | Medium | 4.4 | 2020-12-15 | In nfc_ncif_proc_ee_action of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosur… |
CVE-2020-27045 | High | 7.8 | 2020-12-15 | In CE_SendRawFrame of ce_main.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with… |
CVE-2020-27044 | High | 7.8 | 2020-12-15 | In restartWrite of Parcel.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no addition… |
CVE-2020-27043 | Medium | 4.4 | 2020-12-15 | In nfc_enabled of nfc_main.cc, there is a possible out of bounds read due to an incorrect increment. This could lead to local information disclosure via firmwa… |
CVE-2020-27041 | Medium | 5.5 | 2020-12-15 | In showProvisioningNotification of ConnectivityService.java, there is an unsafe PendingIntent. This could lead to local information disclosure of notification… |
CVE-2020-27040 | Medium | 4.4 | 2020-12-15 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2020-27039 | Medium | 5.5 | 2020-12-15 | In postNotification of ServiceRecord.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosur… |
CVE-2020-27038 | Medium | 6.5 | 2020-12-15 | In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional… |
CVE-2020-27037 | Medium | 4.4 | 2020-12-15 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2020-27036 | Medium | 6.7 | 2020-12-15 | In phNxpNciHal_send_ext_cmd of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2020-27035 | Medium | 5.5 | 2020-12-15 | In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in… |
CVE-2020-27034 | Medium | 5.5 | 2020-12-15 | In createSimSelectNotification of SimSelectNotification.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local in… |
CVE-2020-27033 | Medium | 4.4 | 2020-12-15 | In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2020-27032 | Medium | 5.5 | 2020-12-15 | In getRadioAccessFamily of PhoneInterfaceManager.java, there is a possible read of privileged data due to a missing permission check. This could lead to local… |
CVE-2020-27031 | Medium | 4.4 | 2020-12-15 | In nfc_data_event of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with Sy… |
CVE-2020-27030 | High | 7.8 | 2020-12-15 | In onCreate of HandleApiCalls.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege that allow… |
CVE-2020-27029 | Medium | 6.5 | 2020-12-15 | In TextView of TextView.java, there is a possible app hang due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-27028 | Medium | 4.4 | 2020-12-15 | In filter_incoming_event of hci_layer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2020-27027 | Medium | 5.5 | 2020-12-15 | In nfc_ncif_proc_get_routing of nfc_ncif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2020-27026 | Medium | 5.5 | 2020-12-15 | During boot, the device unlock interface behaves differently depending on if a fingerprint registered to the device is present. This could lead to local inform… |
CVE-2020-27025 | Medium | 5.5 | 2020-12-15 | In EapFailureNotifier.java and SimRequiredNotifier.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informa… |
CVE-2020-27024 | High | 7.5 | 2020-12-15 | In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2020-27023 | Medium | 4.4 | 2020-12-15 | In setErrorPlaybackState of BluetoothMediaBrowserService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local i… |
CVE-2020-27021 | Medium | 4.4 | 2020-12-15 | In avrc_ctrl_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2020-0500 | Medium | 5.5 | 2020-12-15 | In startInputUncheckedLocked of InputMethodManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informa… |
CVE-2020-0499 | Medium | 4.3 | 2020-12-15 | In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote infor… |
CVE-2020-0498 | Medium | 5.5 | 2020-12-15 | In decode_packed_entry_number of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclo… |
CVE-2020-0497 | Medium | 5.5 | 2020-12-15 | In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution p… |
CVE-2020-0496 | Medium | 5.5 | 2020-12-15 | In CPDF_RenderStatus::LoadSMask of cpdf_renderstatus.cpp, there is a possible memory corruption due to a use-after free. This could lead to local information d… |
CVE-2020-0495 | Medium | 5.5 | 2020-12-15 | In decode_Huffman of JBig2_SddProc.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local information disclosure wit… |
CVE-2020-0494 | Medium | 6.5 | 2020-12-15 | In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure wit… |
CVE-2020-0493 | Medium | 5.5 | 2020-12-15 | In CPDF_SampledFunc::v_Call of cpdf_sampledfunc.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informat… |
CVE-2020-0492 | Medium | 6.5 | 2020-12-15 | In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure… |
CVE-2020-0491 | Medium | 6.5 | 2020-12-15 | In readBlock of MatroskaExtractor.cpp, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no ad… |
CVE-2020-0490 | Medium | 6.5 | 2020-12-15 | In floor1_info_unpack of floor1.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |
CVE-2020-0489 | High | 8.8 | 2020-12-15 | In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extra… |
CVE-2020-0488 | Medium | 6.5 | 2020-12-15 | In ihevc_inter_pred_chroma_copy_ssse3 of ihevc_inter_pred_filters_ssse3_intr.c, there is a possible information disclosure due to uninitialized data. This coul… |
CVE-2020-0486 | High | 7.8 | 2020-12-15 | In openAssetFileListener of ContactsProvider2.java, there is a possible permission bypass due to an insecure default value. This could lead to local escalation… |
CVE-2020-0485 | High | 7.8 | 2020-12-15 | In areFunctionsSupported of UsbBackend.java, there is a possible access to tethering from a guest account due to a missing permission check. This could lead to… |
CVE-2020-0484 | Medium | 6.7 | 2020-12-15 | In destroyResources of ComposerClient.h, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with Sys… |
CVE-2020-0483 | Medium | 6.7 | 2020-12-15 | In DrmManagerService::~DrmManagerService() of DrmManagerService.cpp, there is a possible memory corruption due to a use after free. This could lead to local es… |
CVE-2020-0482 | Medium | 4.4 | 2020-12-15 | In command of IncidentService.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure wit… |
CVE-2020-0481 | Low | 3.3 | 2020-12-15 | In AndroidManifest.xml, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a non-system app to send a broadcast… |
CVE-2020-0480 | High | 7.8 | 2020-12-15 | In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of pr… |
CVE-2020-0479 | High | 7.8 | 2020-12-15 | In callUnchecked of DocumentsProvider.java, there is a possible permissions bypass. This could lead to local escalation of privilege allowing a malicious app t… |
CVE-2020-0478 | High | 7.8 | 2020-12-15 | In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2020-0477 | Medium | 5.5 | 2020-12-15 | In sendLinkConfigurationChangedBroadcast of ClientModeImpl.java, there is a possible information disclosure due to a missing permission check. This could lead… |
CVE-2020-0476 | Medium | 4.4 | 2020-12-15 | In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with Sys… |
CVE-2020-0475 | High | 7.8 | 2020-12-15 | In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could… |
CVE-2020-0474 | High | 7.0 | 2020-12-15 | In HalCamera::requestNewFrame of HalCamera.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2020-0473 | Medium | 4.6 | 2020-12-15 | In updateIncomingFileConfirmNotification of BluetoothOppNotification.java, there is a possible permissions bypass. This could lead to local escalation of privi… |
CVE-2020-0368 | Low | 3.3 | 2020-12-15 | In queryInternal of CallLogProvider.java, there is a possible permission bypass due to improper input validation. This could lead to local information disclosu… |
CVE-2020-0280 | Medium | 5.5 | 2020-12-15 | In nci_proc_ee_management_rsp of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… |
CVE-2020-0244 | Medium | 5.5 | 2020-12-15 | In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… |