Page 93 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-6551 | High | 8.8 | 2020-09-21 | Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6550 | High | 8.8 | 2020-09-21 | Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6549 | High | 8.8 | 2020-09-21 | Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6548 | High | 8.8 | 2020-09-21 | Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit… |
CVE-2020-6547 | Medium | 6.5 | 2020-09-21 | Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML… |
CVE-2020-6546 | High | 7.8 | 2020-09-21 | Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted files… |
CVE-2020-6545 | High | 8.8 | 2020-09-21 | Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6544 | High | 8.8 | 2020-09-21 | Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6543 | High | 8.8 | 2020-09-21 | Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2020-6542 | High | 8.8 | 2020-09-21 | Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6541 | High | 8.8 | 2020-09-21 | Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6540 | High | 8.8 | 2020-09-21 | Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6539 | High | 8.8 | 2020-09-21 | Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6538 | Medium | 6.5 | 2020-09-21 | Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HT… |
CVE-2020-6537 | High | 8.8 | 2020-09-21 | Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2020-6532 | High | 8.8 | 2020-09-21 | Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-15966 | Medium | 4.3 | 2020-09-21 | Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension… |
CVE-2020-15965 | High | 8.8 | 2020-09-21 | Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML pa… |
CVE-2020-15964 | High | 8.8 | 2020-09-21 | Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2020-15963 | Critical | 9.6 | 2020-09-21 | Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension… |
CVE-2020-15962 | High | 8.8 | 2020-09-21 | Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access v… |
CVE-2020-15961 | Critical | 9.6 | 2020-09-21 | Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension… |
CVE-2020-15960 | High | 8.8 | 2020-09-21 | Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a craf… |
CVE-2020-15959 | Medium | 4.3 | 2020-09-21 | Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain po… |
CVE-2020-0405 | High | 7.8 | 2020-09-18 | In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with… |
CVE-2020-0365 | Medium | 5.5 | 2020-09-18 | In netd, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privile… |
CVE-2020-0350 | Medium | 6.7 | 2020-09-18 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0349 | Medium | 4.4 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2020-0348 | Medium | 4.9 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over NFC with System execution p… |
CVE-2020-0347 | Medium | 6.7 | 2020-09-18 | In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2020-0335 | Medium | 6.7 | 2020-09-18 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0334 | Medium | 6.7 | 2020-09-18 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0331 | Medium | 5.5 | 2020-09-18 | In Settings, there is a possible permissions bypass. This could lead to local information disclosure of the device's IMEI with User execution privileges needed… |
CVE-2020-0327 | Medium | 5.5 | 2020-09-18 | In core networking, there is a missing permission check. This could lead to local information disclosure of app network usage with User execution privileges ne… |
CVE-2020-0326 | Medium | 6.7 | 2020-09-18 | In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2020-0325 | Medium | 4.4 | 2020-09-18 | In NFC, there is a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not neede… |
CVE-2020-0319 | High | 7.8 | 2020-09-18 | In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0316 | Medium | 5.5 | 2020-09-18 | In Telephony, there is a missing permission check. This could lead to local information disclosure of radio data with no additional execution privileges needed… |
CVE-2020-0315 | Medium | 5.5 | 2020-09-18 | In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileg… |
CVE-2020-0313 | Medium | 5.5 | 2020-09-18 | In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User… |
CVE-2020-0311 | Medium | 5.5 | 2020-09-18 | In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User executi… |
CVE-2020-0310 | Medium | 5.5 | 2020-09-18 | In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileg… |
CVE-2020-0309 | Medium | 6.7 | 2020-09-18 | In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System privi… |
CVE-2020-0307 | Medium | 5.5 | 2020-09-18 | In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileg… |
CVE-2020-0304 | Medium | 5.5 | 2020-09-18 | In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileg… |
CVE-2020-0302 | Medium | 5.5 | 2020-09-18 | In Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileg… |
CVE-2020-0300 | High | 7.5 | 2020-09-18 | In NFC, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure with no additional execution privile… |
CVE-2020-0299 | High | 7.8 | 2020-09-18 | In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. This could lead to local escalation of privilege wit… |
CVE-2020-0298 | High | 7.8 | 2020-09-18 | In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. This could lead to local escalation of privilege with… |
CVE-2020-0295 | Medium | 5.5 | 2020-09-18 | In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privilege… |
CVE-2020-0294 | Medium | 5.5 | 2020-09-18 | In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local… |
CVE-2020-0292 | Medium | 4.4 | 2020-09-18 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2020-0291 | Medium | 4.4 | 2020-09-18 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privi… |
CVE-2020-0286 | High | 7.5 | 2020-09-18 | In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. This could lead to remote information disclosure with no additional execut… |
CVE-2020-0285 | Medium | 5.5 | 2020-09-18 | In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execu… |
CVE-2020-0284 | Medium | 5.5 | 2020-09-18 | In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execu… |
CVE-2020-0282 | Medium | 4.5 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a… |
CVE-2020-0281 | Medium | 4.5 | 2020-09-18 | In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure. System execution privileges, a… |
CVE-2020-0276 | Medium | 5.5 | 2020-09-18 | In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execu… |
CVE-2020-0273 | High | 7.8 | 2020-09-18 | In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. This could lead to local escalation of privilege with no additional… |
CVE-2020-0272 | Medium | 4.4 | 2020-09-18 | In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution pri… |
CVE-2020-0271 | High | 7.3 | 2020-09-18 | In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed… |
CVE-2020-0269 | Medium | 5.5 | 2020-09-18 | In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execu… |
CVE-2020-0268 | Medium | 6.4 | 2020-09-18 | In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2020-0265 | Medium | 5.5 | 2020-09-18 | In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional e… |
CVE-2020-0263 | Medium | 5.5 | 2020-09-18 | In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User e… |
CVE-2020-5976 | High | 7.5 | 2020-09-18 | NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains a vulnerability in the application soft… |
CVE-2020-0354 | Critical | 9.8 | 2020-09-18 | In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution priv… |
CVE-2020-0318 | Medium | 5.5 | 2020-09-18 | In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execut… |
CVE-2020-0262 | High | 7.8 | 2020-09-18 | In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User ex… |
CVE-2020-0089 | High | 7.8 | 2020-09-18 | In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional executio… |
CVE-2020-0426 | Medium | 5.5 | 2020-09-17 | In SyncManager, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with no additional execut… |
CVE-2020-0425 | Medium | 5.5 | 2020-09-17 | There is a possible way to view notifications even when the "Lockdown" feature is on. This could lead to local information disclosure with no additional execut… |
CVE-2020-0406 | High | 7.8 | 2020-09-17 | In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allo… |
CVE-2020-0375 | High | 7.8 | 2020-09-17 | In Telephony, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege and the setting of supp… |
CVE-2020-0374 | High | 7.8 | 2020-09-17 | In NFC, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges n… |
CVE-2020-0373 | Medium | 4.7 | 2020-09-17 | In SoundTriggerHwService, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional ex… |
CVE-2020-0372 | Medium | 5.5 | 2020-09-17 | In ActivityManager, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no add… |
CVE-2020-0370 | Medium | 6.5 | 2020-09-17 | In libAACdec, there is a possible out of bounds read due to missing bounds check. This could lead to remote information disclosure with no additional execution… |
CVE-2020-0369 | High | 7.8 | 2020-09-17 | In libavb, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2020-0366 | High | 7.8 | 2020-09-17 | In PackageInstaller, there is a possible permissions bypass due to a tapjacking vulnerability. This could lead to local escalation of privilege using an app se… |
CVE-2020-0364 | Medium | 6.5 | 2020-09-17 | In libDRCdec, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional executi… |
CVE-2020-0363 | Medium | 6.5 | 2020-09-17 | In libmedia, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution… |
CVE-2020-0362 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional exe… |
CVE-2020-0361 | Medium | 6.5 | 2020-09-17 | In libDRCdec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional executi… |
CVE-2020-0360 | High | 7.8 | 2020-09-17 | In Notification Access Confirmation, there is a possible permissions bypass due to uninformed consent. This could lead to local escalation of privilege with Us… |
CVE-2020-0359 | Medium | 5.5 | 2020-09-17 | In GLESRenderEngine, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execut… |
CVE-2020-0358 | Medium | 6.4 | 2020-09-17 | In SurfaceFlinger, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2020-0357 | High | 7.8 | 2020-09-17 | In SurfaceFlinger, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the graphics server with no… |
CVE-2020-0356 | Medium | 6.7 | 2020-09-17 | In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… |
CVE-2020-0355 | Medium | 6.5 | 2020-09-17 | In libFraunhoferAAC, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional… |
CVE-2020-0353 | Medium | 6.5 | 2020-09-17 | In libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execu… |
CVE-2020-0352 | Medium | 5.5 | 2020-09-17 | In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution pri… |
CVE-2020-0351 | Medium | 6.5 | 2020-09-17 | In libstagefright, there is possible CPU exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution… |
CVE-2020-0346 | High | 7.8 | 2020-09-17 | In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization we… |
CVE-2020-0345 | High | 7.8 | 2020-09-17 | In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution p… |
CVE-2020-0344 | Medium | 5.5 | 2020-09-17 | In MediaProvider, there is a possible permissions bypass due to SQL injection. This could lead to local information disclosure with no additional execution pri… |
CVE-2020-0343 | Medium | 5.5 | 2020-09-17 | In NetworkStatsService, there is a possible access to protected data due to a missing permission check. This could lead to local information disclosure with no… |
CVE-2020-0341 | High | 7.8 | 2020-09-17 | In DisplayManager, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional… |
CVE-2020-0340 | Medium | 6.5 | 2020-09-17 | In libcodec2_soft_mp3dec, there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additi… |