Browse CVEs

CRITICAL 9.8 CVE-2019-20549 An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. A heap out-of-bounds access can occur… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20553 An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) softwa… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20556 An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) softwa… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20558 An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a Buffer Overflow in the Touch… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20560 An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. The BIOSUB Trustlet has an out of bounds write. The… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20561 An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. The bootloader has an integer signednes… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2020-10848 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software. Arbitrary memory mapping exists i… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2020-10849 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos7885, Exynos8895, and Exynos9810 chipsets) software. The Ga… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2020-10850 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The secure bootloade has a buffer over… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2020-10837 An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. The Esecomm Trustlet allows a stack overflow and a… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2020-10836 An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The Widevine Trustlet allows read and … Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20544 An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. There is an out-of-bounds write in the ICCC Trus… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20545 An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. A buffer overflow in the HDCP Trustlet affects s… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20536 An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. The Firewall application mishandles t… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20537 An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets). There is arbitrary memory overwrite in the SEM Trustle… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2019-20530 An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software. Arbitrary code execution is possible on the lock… Android Mitigation only Fix from $2,3002020-03-24 CRITICAL 9.8 CVE-2020-0086 In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to arbitrary code execution if IntS… Android Mitigation only Fix from $2,3002020-03-15 CRITICAL 10.0 CVE-2015-0565EPSS 14% NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. Native Client Mitigation only Fix from $2,3002020-02-25 CRITICAL 9.8 CVE-2013-6792 Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability Android 4.4+ Fix from $2,3002020-01-23 CRITICAL 9.8 CVE-2019-16778 In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32. In this case data_… Tensorflow 1.15.0+ Fix from $2,3002019-12-16 CRITICAL 9.8 CVE-2019-5866 Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 75.0.3770.142+ Fix from $2,3002019-11-25 CRITICAL 9.6 CVE-2019-5870 Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… Chrome 77.0.3865.75+ Fix from $2,3002019-11-25 CRITICAL 9.6 CVE-2019-5850 Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potential… Chrome 76.0.3809.87+ Fix from $2,3002019-11-25 CRITICAL 9.8 CVE-2016-5194 Unspecified vulnerabilities in Google Chrome before 54.0.2840.59. Chrome 54.0.2840.59+ Fix from $2,3002019-11-20 CRITICAL 9.8 CVE-2016-9652 Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75. Chrome 55.0.2883.75+ Fix from $2,3002019-11-20 CRITICAL 9.8 CVE-2019-2036 In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2019-2204 In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code exe… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2019-2205 In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote co… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2011-2337 A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. Blink Mitigation only Fix from $2,3002019-11-07 CRITICAL 9.8 CVE-2011-1460 WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks. Blink Patch available Fix from $2,3002019-11-05