Page 97 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-13833 | Critical | 9.1 | 2020-06-04 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arbitrary file overwrites via a symlink att… |
CVE-2020-13832 | Critical | 9.8 | 2020-06-04 | An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine Trustlet allows arbitrary code executio… |
CVE-2020-13831 | Critical | 9.8 | 2020-06-04 | An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software. The Trustonic Kinibi component allows arbitrary memor… |
CVE-2020-13830 | High | 7.5 | 2020-06-04 | An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Samsung ID is SVE-2019-16382 (June 2020). |
CVE-2020-13829 | High | 7.5 | 2020-06-04 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Sa… |
CVE-2020-6504 | Medium | 4.3 | 2020-06-03 | Insufficient policy enforcement in notifications in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass notification restrictions via a cr… |
CVE-2020-6503 | Medium | 6.5 | 2020-06-03 | Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information fro… |
CVE-2020-6502 | Medium | 6.5 | 2020-06-03 | Incorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-6501 | Medium | 6.5 | 2020-06-03 | Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML pa… |
CVE-2020-6500 | Medium | 6.5 | 2020-06-03 | Inappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) v… |
CVE-2020-6499 | Medium | 6.5 | 2020-06-03 | Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppCache security restrictions via a crafte… |
CVE-2020-6498 | Medium | 6.5 | 2020-06-03 | Incorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted HTM… |
CVE-2020-6497 | Medium | 6.5 | 2020-06-03 | Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted URI. |
CVE-2020-6496 | High | 8.8 | 2020-06-03 | Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2020-6495 | Medium | 6.5 | 2020-06-03 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2020-6494 | Medium | 6.5 | 2020-06-03 | Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi… |
CVE-2020-6493 | Critical | 9.6 | 2020-06-03 | Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially pe… |
CVE-2020-6453 | High | 8.8 | 2020-06-03 | Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2020-6419 | High | 8.8 | 2020-06-03 | Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2011-2863 | Medium | 6.5 | 2020-06-03 | Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process mem… |
CVE-2011-1805 | High | 8.8 | 2020-06-03 | Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6491 | Medium | 6.5 | 2020-05-21 | Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain nam… |
CVE-2020-6490 | Medium | 4.3 | 2020-05-21 | Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin… |
CVE-2020-6489 | Medium | 4.3 | 2020-05-21 | Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain act… |
CVE-2020-6488 | Medium | 4.3 | 2020-05-21 | Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted H… |
CVE-2020-6487 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted H… |
CVE-2020-6486 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted… |
CVE-2020-6485 | Medium | 6.5 | 2020-05-21 | Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypas… |
CVE-2020-6484 | Medium | 6.5 | 2020-05-21 | Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted r… |
CVE-2020-6483 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HT… |
CVE-2020-6482 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2020-6481 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted dom… |
CVE-2020-6480 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions. |
CVE-2020-6479 | Medium | 6.5 | 2020-05-21 | Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-6478 | Medium | 6.5 | 2020-05-21 | Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-6477 | High | 7.8 | 2020-05-21 | Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted… |
CVE-2020-6476 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension t… |
CVE-2020-6475 | Medium | 6.5 | 2020-05-21 | Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page. |
CVE-2020-6474 | High | 8.8 | 2020-05-21 | Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6473 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from proc… |
CVE-2020-6472 | Medium | 6.5 | 2020-05-21 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2020-6471 | Critical | 9.6 | 2020-05-21 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2020-6470 | Medium | 6.1 | 2020-05-21 | Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UX… |
CVE-2020-6469 | Critical | 9.6 | 2020-05-21 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2020-6468 | High | 8.8 | 2020-05-21 | Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6467 | High | 8.8 | 2020-05-21 | Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6466 | Critical | 9.6 | 2020-05-21 | Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… |
CVE-2020-6465 | Critical | 9.6 | 2020-05-21 | Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potential… |
CVE-2020-6464 | High | 8.8 | 2020-05-21 | Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6463 | High | 8.8 | 2020-05-21 | Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6462 | Critical | 9.6 | 2020-05-21 | Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially per… |
CVE-2020-6461 | Critical | 9.6 | 2020-05-21 | Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2020-6460 | Medium | 6.5 | 2020-05-21 | Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a crafted domai… |
CVE-2020-6459 | High | 8.8 | 2020-05-21 | Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2020-6458 | High | 8.8 | 2020-05-21 | Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted P… |
CVE-2020-6457 | Critical | 9.6 | 2020-05-21 | Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTM… |
CVE-2020-0221 | Critical | 9.8 | 2020-05-14 | Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer wit… |
CVE-2020-0220 | Medium | 6.7 | 2020-05-14 | In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2020-0110 | High | 7.8 | 2020-05-14 | In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition… |
CVE-2020-0109 | High | 7.8 | 2020-05-14 | In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by… |
CVE-2020-0106 | Medium | 5.5 | 2020-05-14 | In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local informatio… |
CVE-2020-0105 | High | 7.8 | 2020-05-14 | In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps t… |
CVE-2020-0104 | Medium | 5.5 | 2020-05-14 | In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclo… |
CVE-2020-0103 | Critical | 9.8 | 2020-05-14 | In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no… |
CVE-2020-0102 | High | 7.8 | 2020-05-14 | In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of… |
CVE-2020-0101 | Medium | 5.5 | 2020-05-14 | In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure w… |
CVE-2020-0100 | Medium | 5.5 | 2020-05-14 | In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data fro… |
CVE-2020-0098 | High | 7.8 | 2020-05-14 | In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege w… |
CVE-2020-0097 | High | 7.8 | 2020-05-14 | In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local es… |
CVE-2020-0096 | High | 7.8 | 2020-05-14 | In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation o… |
CVE-2020-0094 | High | 7.8 | 2020-05-14 | In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2020-0093 | Medium | 5.0 | 2020-05-14 | In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… |
CVE-2020-0092 | Medium | 5.0 | 2020-05-14 | In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This c… |
CVE-2020-0091 | Medium | 5.5 | 2020-05-14 | In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 |
CVE-2020-0090 | Medium | 5.5 | 2020-05-14 | An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 |
CVE-2020-0065 | Medium | 5.5 | 2020-05-14 | An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448 |
CVE-2020-0064 | Medium | 5.5 | 2020-05-14 | An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855 |
CVE-2020-0024 | High | 7.8 | 2020-05-14 | In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalatio… |
CVE-2020-12754 | High | 7.8 | 2020-05-11 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via th… |
CVE-2020-12753 | Critical | 9.8 | 2020-05-11 | An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because o… |
CVE-2020-12752 | High | 7.5 | 2020-05-11 | An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. Attackers can determine user credentials via a brute-force a… |
CVE-2020-12751 | High | 7.8 | 2020-05-11 | An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory… |
CVE-2020-12750 | High | 7.5 | 2020-05-11 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via SPEN. The Samsung ID is SVE-20… |
CVE-2020-12749 | High | 7.8 | 2020-05-11 | An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The S.LSI Wi-Fi drivers have a buffer overflow. The Samsung ID is SVE… |
CVE-2020-12748 | Medium | 5.3 | 2020-05-11 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and designate a different p… |
CVE-2020-12747 | Critical | 9.8 | 2020-05-11 | An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. The Bootloader has a heap-based buffer ov… |
CVE-2020-12746 | Critical | 9.8 | 2020-05-11 | An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers can bypass the Secure Bootloader prote… |
CVE-2020-12745 | High | 7.5 | 2020-05-11 | An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and access clipboard conten… |
CVE-2020-6616 | Medium | 6.5 | 2020-05-08 | Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hard… |
CVE-2020-8899 | Critical | 9.8 | 2020-05-06 | There is a buffer overwrite vulnerability in the Quram qmg library of Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0). An unauthenticated, unauthorize… |
CVE-2020-8896 | Medium | 4.2 | 2020-05-04 | A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the… |
CVE-2018-21233 | Medium | 6.5 | 2020-05-04 | TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs i… |
CVE-2020-7645 | Critical | 9.8 | 2020-05-02 | All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems. |
CVE-2019-20791 | Critical | 9.8 | 2020-04-28 | OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc. |
CVE-2020-6828 | High | 7.5 | 2020-04-24 | A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the u… |
CVE-2020-6827 | Medium | 4.7 | 2020-04-24 | When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorre… |
CVE-2020-8895 | High | 7.8 | 2020-04-21 | Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to… |
CVE-2020-0082 | High | 7.8 | 2020-04-17 | In ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary intent due to unsafe deserialization. This could lead to local e… |
CVE-2020-0081 | High | 7.8 | 2020-04-17 | In finalize of AssetManager.java, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional… |
CVE-2020-0080 | High | 7.8 | 2020-04-17 | In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification… |