Page 91 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8944 | Medium | 5.3 | 2020-12-15 | An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output w… |
CVE-2020-8943 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size wa… |
CVE-2020-8942 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was no… |
CVE-2020-8941 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker c… |
CVE-2020-8940 | Medium | 5.3 | 2020-12-15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker con… |
CVE-2020-8939 | Medium | 5.3 | 2020-12-15 | An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within th… |
CVE-2020-8938 | Medium | 5.3 | 2020-12-15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled… |
CVE-2020-8937 | Medium | 5.3 | 2020-12-15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a… |
CVE-2020-8936 | Medium | 5.3 | 2020-12-15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to vali… |
CVE-2020-8935 | Medium | 5.3 | 2020-12-15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code… |
CVE-2020-0456 | Critical | 9.8 | 2020-12-14 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843 |
CVE-2020-0019 | Medium | 5.5 | 2020-12-14 | In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional executi… |
CVE-2020-0016 | High | 7.8 | 2020-12-14 | In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execut… |
CVE-2020-0470 | Medium | 5.5 | 2020-12-14 | In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosur… |
CVE-2020-0469 | Medium | 5.5 | 2020-12-14 | In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of servic… |
CVE-2020-0468 | Medium | 5.5 | 2020-12-14 | In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check… |
CVE-2020-0467 | Medium | 5.5 | 2020-12-14 | In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure… |
CVE-2020-0466 | High | 7.8 | 2020-12-14 | In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privileg… |
CVE-2020-0465 | Medium | 6.8 | 2020-12-14 | In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2020-0464 | Medium | 5.5 | 2020-12-14 | In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed w… |
CVE-2020-0463 | High | 7.5 | 2020-12-14 | In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information d… |
CVE-2020-0460 | High | 7.5 | 2020-12-14 | In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to… |
CVE-2020-0459 | Low | 3.3 | 2020-12-14 | In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission c… |
CVE-2020-0458 | High | 7.8 | 2020-12-14 | In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could… |
CVE-2020-0457 | Critical | 9.8 | 2020-12-14 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562 |
CVE-2020-0455 | Critical | 9.8 | 2020-12-14 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514 |
CVE-2020-0444 | High | 7.8 | 2020-12-14 | In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of pri… |
CVE-2020-0440 | High | 7.8 | 2020-12-14 | In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This coul… |
CVE-2020-0099 | High | 7.8 | 2020-12-14 | In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of p… |
CVE-2020-8908 | Low | 3.3 | 2020-12-10 | A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a tempor… |
CVE-2020-26270 | Medium | 4.4 | 2020-12-10 | In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using… |
CVE-2020-26269 | High | 7.5 | 2020-12-10 | In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out… |
CVE-2020-26268 | Medium | 4.4 | 2020-12-10 | In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutab… |
CVE-2020-26267 | Medium | 4.4 | 2020-12-10 | In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that th… |
CVE-2020-26266 | Medium | 4.4 | 2020-12-10 | In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having te… |
CVE-2020-26271 | Medium | 4.4 | 2020-12-10 | In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph… |
CVE-2020-8920 | Low | 3.5 | 2020-12-10 | An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the Filter… |
CVE-2020-8919 | Low | 3.5 | 2020-12-10 | An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST AP… |
CVE-2020-26964 | Medium | 6.8 | 2020-12-09 | If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to t… |
CVE-2020-7765 | Medium | 5.6 | 2020-11-16 | This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user i… |
CVE-2020-0454 | Medium | 5.5 | 2020-11-10 | In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local inform… |
CVE-2020-0453 | Medium | 5.5 | 2020-11-10 | In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information d… |
CVE-2020-0452 | Critical | 9.8 | 2020-11-10 | In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a thir… |
CVE-2020-0451 | High | 8.8 | 2020-11-10 | In sbrDecoder_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote… |
CVE-2020-0450 | Medium | 6.5 | 2020-11-10 | In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC w… |
CVE-2020-0449 | High | 8.8 | 2020-11-10 | In btm_sec_disconnected of btm_sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth… |
CVE-2020-0448 | Medium | 5.5 | 2020-11-10 | In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could… |
CVE-2020-0447 | Critical | 9.8 | 2020-11-10 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617 |
CVE-2020-0446 | Critical | 9.8 | 2020-11-10 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528 |
CVE-2020-0445 | Critical | 9.8 | 2020-11-10 | There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527 |
CVE-2020-0443 | Medium | 5.5 | 2020-11-10 | In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory… |
CVE-2020-0442 | High | 7.5 | 2020-11-10 | In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of se… |
CVE-2020-0441 | High | 7.5 | 2020-11-10 | In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of ser… |
CVE-2020-0439 | High | 7.8 | 2020-11-10 | In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local esc… |
CVE-2020-0438 | High | 7.8 | 2020-11-10 | In the AIBinder_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation o… |
CVE-2020-0437 | Medium | 5.5 | 2020-11-10 | In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service… |
CVE-2020-0424 | Medium | 5.5 | 2020-11-10 | In send_vc of res_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no ad… |
CVE-2020-0418 | High | 7.8 | 2020-11-10 | In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. Us… |
CVE-2020-0409 | High | 7.8 | 2020-11-10 | In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no addition… |
CVE-2020-28345 | High | 7.5 | 2020-11-08 | An issue was discovered on LG mobile devices with Android OS 10 software. The Wi-Fi subsystem may crash because of the lack of a NULL parameter check. The LG I… |
CVE-2020-28344 | High | 7.5 | 2020-11-08 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. System services may crash because of the lack of a NULL parameter… |
CVE-2020-28343 | High | 7.8 | 2020-11-08 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 980, 9820, and 9830 chipsets) software. The NPU driver allows attackers to ex… |
CVE-2020-28342 | High | 7.8 | 2020-11-08 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (China / India) software. The S Secure application allows attackers to bypass authent… |
CVE-2020-28341 | High | 7.8 | 2020-11-08 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos990 chipsets) software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to ex… |
CVE-2020-28340 | Critical | 9.8 | 2020-11-08 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via S… |
CVE-2020-6557 | Medium | 6.5 | 2020-11-03 | Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2020-16011 | Critical | 9.6 | 2020-11-03 | Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2020-16010 | Critical | 9.6 | 2020-11-03 | Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2020-16009 | High | 8.8 | 2020-11-03 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2020-16008 | High | 8.8 | 2020-11-03 | Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC… |
CVE-2020-16007 | High | 7.8 | 2020-11-03 | Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted files… |
CVE-2020-16006 | High | 8.8 | 2020-11-03 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2020-16005 | High | 8.8 | 2020-11-03 | Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2020-16004 | High | 8.8 | 2020-11-03 | Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2020-16003 | High | 8.8 | 2020-11-03 | Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16002 | High | 8.8 | 2020-11-03 | Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. |
CVE-2020-16001 | High | 8.8 | 2020-11-03 | Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-16000 | High | 8.8 | 2020-11-03 | Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2020-15999 | Critical | 9.6 | 2020-11-03 | Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2020-15998 | High | 8.8 | 2020-11-03 | Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo… |
CVE-2020-15997 | High | 8.8 | 2020-11-03 | Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb… |
CVE-2020-15996 | High | 8.8 | 2020-11-03 | Use after free in passwords in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a… |
CVE-2020-15995 | High | 8.8 | 2020-11-03 | Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15994 | High | 8.8 | 2020-11-03 | Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15993 | Critical | 9.8 | 2020-11-03 | Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15992 | High | 8.8 | 2020-11-03 | Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypa… |
CVE-2020-15991 | High | 8.8 | 2020-11-03 | Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially per… |
CVE-2020-15990 | High | 8.8 | 2020-11-03 | Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2020-15989 | Medium | 5.5 | 2020-11-03 | Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory v… |
CVE-2020-15988 | Medium | 6.3 | 2020-11-03 | Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files t… |
CVE-2020-15987 | High | 8.8 | 2020-11-03 | Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream. |
CVE-2020-15986 | Medium | 6.5 | 2020-11-03 | Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15985 | Medium | 6.5 | 2020-11-03 | Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-15984 | Medium | 6.5 | 2020-11-03 | Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL ba… |
CVE-2020-15983 | High | 7.8 | 2020-11-03 | Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a craft… |
CVE-2020-15982 | Medium | 6.5 | 2020-11-03 | Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process… |
CVE-2020-15981 | Medium | 6.5 | 2020-11-03 | Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory vi… |
CVE-2020-15980 | High | 7.8 | 2020-11-03 | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via cra… |
CVE-2020-15979 | High | 8.8 | 2020-11-03 | Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2020-15978 | High | 8.8 | 2020-11-03 | Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process… |