Browse CVEs

HIGH 7.8 CVE-2015-9006 In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially e… Android Patch available Fix from $1,9502017-06-06 HIGH 7.8 CVE-2016-10237 If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases … Android Patch available Fix from $1,9502017-05-16 HIGH 8.8 CVE-2016-2433 The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in th… Android after 6.0.1 Fix from $1,9502017-04-21 CRITICAL 9.8 CVE-2016-8418 A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of th… Android after 6.0.1 Fix from $2,3002017-02-08 HIGH 8.8 CVE-2016-5206 The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which … Chrome after 54.0.2840.99 Fix from $1,9502017-01-19 MEDIUM 6.5 CVE-2016-5217 The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to pr… Chrome after 54.0.2840.99 Fix from $1,6002017-01-19 HIGH 7.0 CVE-2016-6783 An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the contex… Android after 7.1.0 Fix from $1,9502017-01-12 HIGH 7.0 CVE-2016-6784 An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the contex… Android Mitigation only Fix from $1,9502017-01-12 HIGH 7.8 CVE-2016-6768 A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code … Android Mitigation only Fix from $1,9502017-01-12 MEDIUM 5.5 CVE-2016-6763 A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device hang or r… Android Mitigation only Fix from $1,6002017-01-12 MEDIUM 5.3 CVE-2016-6771 An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. T… Android Mitigation only Fix from $1,6002017-01-12 MEDIUM 6.5 CVE-2016-5189 Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origin… Chrome after 53.0.2785.143 Fix from $1,6002016-12-18 MEDIUM 6.5 CVE-2016-5192 Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypas… Chrome after 53.0.2785.143 Fix from $1,6002016-12-18 MEDIUM 5.9 CVE-2016-5341 The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service (GPS signal-acquisition delay) via an … Android after 7.1.0 Fix from $1,6002016-12-06 MEDIUM 5.5 CVE-2016-6747 A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a dev… Android after 7.0 Fix from $1,6002016-11-25 CRITICAL 9.8 CVE-2016-6725 A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary … Android after 7.0 Fix from $2,3002016-11-25 MEDIUM 5.5 CVE-2016-6724 A denial of service vulnerability in the Input Manager Service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-1… Android 4.4.4 / 5.0.2+ Fix from $1,6002016-11-25 MEDIUM 5.5 CVE-2016-6719 An elevation of privilege vulnerability in the Bluetooth component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 20… Android 4.4.4 / 5.0.2+ Fix from $1,6002016-11-25 MEDIUM 5.5 CVE-2016-6716 An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malicious application to create sho… Android after 7.0 Fix from $1,6002016-11-25 MEDIUM 5.5 CVE-2016-6715 An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11… Android 4.4.4 / 5.0.2+ Fix from $1,6002016-11-25 MEDIUM 5.5 CVE-2016-6714 A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a … Android after 6.0.1 Fix from $1,6002016-11-25 MEDIUM 5.5 CVE-2016-6713 A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a … Android after 6.0.1 Fix from $1,6002016-11-25 MEDIUM 5.5 CVE-2016-6708 An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your… Android after 7.0 Fix from $1,6002016-11-25 HIGH 7.8 CVE-2016-6703 A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befo… Android after 6.0.1 Fix from $1,9502016-11-25 HIGH 7.8 CVE-2016-6702 A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker usi… Android Mitigation only Fix from $1,9502016-11-25 HIGH 7.8 CVE-2016-6701 A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause me… Android after 7.0 Fix from $1,9502016-11-25 MEDIUM 5.5 CVE-2016-6690 The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cau… Android after 7.0 Fix from $1,6002016-10-10 MEDIUM 5.5 CVE-2016-3925 server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (blocked W… Android Patch available Fix from $1,6002016-10-10 MEDIUM 5.5 CVE-2016-3923 The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and conse… Android after 7.0 Fix from $1,6002016-10-10 MEDIUM 6.5 CVE-2016-3882 Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attacker… Android Patch available Fix from $1,6002016-10-10