Browse CVEs

CRITICAL 9.1 CVE-2022-30713 Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $2,3002022-06-07 CRITICAL 9.1 CVE-2022-30710 Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $2,3002022-06-07 CRITICAL 9.8 CVE-2022-20120 Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A Android No fix yet Fix from $2,3002022-05-10 CRITICAL 9.8 CVE-2022-26093 Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26094 Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26095 Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26096 Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26097 Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds w… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-26098 Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remot… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-27567 Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remo… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-27568 Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote … Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-27569 Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote … Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-27570 Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by … Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-27571 Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution … Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.8 CVE-2022-27572 Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote … Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.1 CVE-2022-26099 Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remot… Android Mitigation only Fix from $2,3002022-04-11 CRITICAL 9.6 CVE-2022-0466 Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a mali… Chrome 98.0.4758.80+ Fix from $2,3002022-04-05 CRITICAL 9.6 CVE-2022-0790 Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactio… Chrome 99.0.4844.51+ Fix from $2,3002022-04-05 CRITICAL 9.6 CVE-2022-0452 Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafte… Chrome 98.0.4758.80+ Fix from $2,3002022-04-05 CRITICAL 9.1 CVE-2021-46743 In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of k… Firebase Php Jwt 6.0.0+ Fix from $2,3002022-03-29 CRITICAL 9.8 CVE-2021-39737 Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A Android No fix yet Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39708 In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escal… Android Mitigation only Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39710 Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A Android No fix yet Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39720 Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A Android No fix yet Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2021-39723 Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A Android No fix yet Fix from $2,3002022-03-16 CRITICAL 9.8 CVE-2022-25818 Improper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code execution. Android Mitigation only Fix from $2,3002022-03-10 CRITICAL 9.6 CVE-2022-0290 Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a craft… Chrome 97.0.4692.99+ Fix from $2,3002022-02-12 CRITICAL 9.6 CVE-2022-0097 Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious exten… Chrome 97.0.4692.71+ Fix from $2,3002022-02-12 CRITICAL 9.8 CVE-2022-23425 Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base… Android Mitigation only Fix from $2,3002022-02-11 CRITICAL 9.8 CVE-2021-39658 ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the permissions o… Android Mitigation only Fix from $2,3002022-02-11