Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could …
In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to lo…
In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to…
In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service …
In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to…
In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to…
Chrome
MEDIUM 5.4
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type …
In cpm_fwtp_msg_handler of cpm/google/lib/tracepoint/cpm_fwtp_ipc.c, there is a possible memory overwrite due to improper input validation. This coul…
In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This …
In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local infor…
A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote …
In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated them due …
In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of p…
In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of pri…
In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation…
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to…
In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privi…
In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to im…
In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications when not associated to a compan…
In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead …
In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to loc…
Chrome
HIGH 8.8
Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code vi…
Chrome
MEDIUM 5.4
Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domai…
In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screen recordi…
In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation. This could lead to l…
In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could …
In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation. This coul…
In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input v…
In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This could lead to local information …
In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popup due to…