Browse CVEs

MEDIUM 6.7 CVE-2019-9443 In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation o… Android Mitigation only Fix from $1,6002019-09-06 MEDIUM 6.5 CVE-2019-5768 DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user… Chrome 72.0.3626.81+ Fix from $1,6002019-02-19 HIGH 7.8 CVE-2018-11965 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Anyone can execute proptrigger.sh which wi… Android Patch available Fix from $1,9502018-12-20 MEDIUM 6.5 CVE-2018-18344 Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote at… Chrome 71.0.3578.80+ Fix from $1,6002018-12-11 HIGH 7.8 CVE-2018-11911 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper configuration of script may lead … Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-11912 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper configuration of daemons may lead… Android Patch available Fix from $1,9502018-11-27 MEDIUM 6.5 CVE-2018-6080 Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer p… Chrome 65.0.3325.146+ Fix from $1,6002018-11-14 MEDIUM 5.3 CVE-2017-13165 An elevation of privilege vulnerability in the kernel file system. Product: Android. Versions: Android kernel. Android ID A-31269937. Android Patch available Fix from $1,6002017-12-06 HIGH 7.8 CVE-2017-9724 In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, s… Android after 8.0 Fix from $1,9502017-09-21 CRITICAL 9.6 CVE-2012-5376 The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrict… Chrome 22.0.1229.94+ Fix from $2,3002012-10-11 HIGH 7.5 CVE-2011-3898 Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user confirmation before applet execution begins, … Chrome 15.0.874.120+ Fix from $1,9502011-11-11