Browse CVEs

CRITICAL 9.1 CVE-2026-11720 A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL bui… Mcp Toolbox For Databases 1.3.0+ Fix from $2,3002026-06-29 MEDIUM 6.1 CVE-2026-53766 Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agent control and inspect a live Chrome browser. From 0.24.0 until 1.1.0, McpContex… Chrome Devtools Mcp 1.1.0+ Fix from $1,6002026-06-24 MEDIUM 6.2 CVE-2026-0055 In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory du… Android Mitigation only Fix from $1,6002026-06-01 HIGH 8.8 CVE-2026-4092 Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script proje… Clasp 3.2.0+ Fix from $1,9502026-03-13 HIGH 8.4 CVE-2025-48636 In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could … Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.8 CVE-2025-48567 In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.8 CVE-2026-3223 Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer. Web Designer No fix yet Fix from $1,9502026-02-27 MEDIUM 5.5 CVE-2025-48550 In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error. This could lead … Android Patch available Fix from $1,6002025-09-04 MEDIUM 6.5 CVE-2025-5981 Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for con… Osv Scalibr 0.1.8+ Fix from $1,6002025-06-18 HIGH 8.8 CVE-2025-4613 Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution b… Web Designer 16.3.0.0407+ Fix from $1,9502025-06-12 HIGH 8.1 CVE-2025-1915 Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who co… Chrome 134.0.6998.35+ Fix from $1,9502025-03-05 HIGH 7.5 CVE-2024-10389 There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Writ… Safearchive 2024-10-25+ Fix from $1,9502024-11-04 HIGH 7.8 CVE-2024-47027 In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to improper input validation. This coul… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2023-35670 In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path travers… Android Patch available Fix from $1,9502023-09-11 MEDIUM 5.5 CVE-2023-21268 In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial… Android Patch available Fix from $1,6002023-08-14 HIGH 7.8 CVE-2023-21093 In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a path traver… Android Patch available Fix from $1,9502023-04-19 HIGH 7.8 CVE-2023-20943 In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could … Android Patch available Fix from $1,9502023-02-28 MEDIUM 6.7 CVE-2022-20505 In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of priv… Android Patch available Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-29580 There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symb… Google Search 13.41+ Fix from $1,9502022-12-13 MEDIUM 5.5 CVE-2022-20453 In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local deni… Android Mitigation only Fix from $1,6002022-11-08 HIGH 7.8 CVE-2022-20395 In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502022-09-13 MEDIUM 5.5 CVE-2022-33715 Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access files of … Android Mitigation only Fix from $1,6002022-08-05 MEDIUM 6.5 CVE-2022-1128 Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to … Chrome 100.0.4896.60+ Fix from $1,6002022-07-23 HIGH 7.8 CVE-2022-20220 In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of priv… Android Patch available Fix from $1,9502022-07-13 MEDIUM 5.5 CVE-2022-20101 In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional… Android Mitigation only Fix from $1,6002022-05-03 HIGH 7.8 CVE-2022-27836 Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local a… Android Mitigation only Fix from $1,9502022-04-11 HIGH 7.8 CVE-2021-25511 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal… Android Mitigation only Fix from $1,9502021-12-08 HIGH 8.0 CVE-2021-25485 Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote so… Android Mitigation only Fix from $1,9502021-10-06 MEDIUM 6.5 CVE-2021-25450 Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socke… Android Mitigation only Fix from $1,6002021-09-09 MEDIUM 5.5 CVE-2021-25452 An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent … Android Mitigation only Fix from $1,6002021-09-09