Browse high-severity CVEs

Chrome MEDIUM 6.5

CVE-2017-15425

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homogr…

Fix: 63.0.3239.84+

Fix from $1,600 2018-08-28

Chrome MEDIUM 6.5

CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the con…

Fix: 63.0.3239.84+

Fix from $1,600 2018-08-28

Android HIGH 7.8

CVE-2018-3597

In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch l…

Patch available

Fix from $1,950 2018-07-06

Android HIGH 7.8

CVE-2018-3582

Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM,…

Patch available

Fix from $1,950 2018-06-12

Android HIGH 8.8

CVE-2014-0900

The Device Administrator code in Android before 4.4.1_r1 might allow attackers to spoof device administrators and consequently bypass MDM restriction…

Fix: after 4.4.1

Fix from $1,950 2018-04-20

Android HIGH 7.5

CVE-2016-10235

A denial of service vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-34390620. References: QC-CR#…

Mitigation only

Fix from $1,950 2018-04-04

Android HIGH 7.8

CVE-2017-13287

In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input validation. This could lead to lo…

Mitigation only

Fix from $1,950 2018-04-04

Android HIGH 7.5

CVE-2017-13300

A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394.

Mitigation only

Fix from $1,950 2018-04-04

Android HIGH 7.5

CVE-2017-13301

A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711.

No fix yet

Fix from $1,950 2018-04-04

Android HIGH 7.5

CVE-2017-13302

A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749.

Mitigation only

Fix from $1,950 2018-04-04

Android MEDIUM 5.3

CVE-2017-13295

A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. …

Mitigation only

Fix from $1,600 2018-04-04

Android CRITICAL 9.8

CVE-2017-13284

In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lea…

Mitigation only

Fix from $2,300 2018-04-04

Android CRITICAL 9.8

CVE-2017-18147

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch leve…

No fix yet

Fix from $2,300 2018-04-03

Android HIGH 7.8

CVE-2017-14892

In the function msm_pcm_hw_params() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-09-19, the return value of q6asm_open_shared_…

Patch available

Fix from $1,950 2018-03-30

Android HIGH 7.8

CVE-2017-18065

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vent->v…

Patch available