Browse CVEs

CRITICAL 9.8 CVE-2026-5902 Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media … Chrome 147.0.7727.55+ Fix from $2,3002026-04-08 MEDIUM 6.8 CVE-2026-5893 Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… Chrome 147.0.7727.55+ Fix from $1,6002026-04-08 MEDIUM 5.3 CVE-2026-5890 Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory v… Chrome 147.0.7727.55+ Fix from $1,6002026-04-08 HIGH 7.4 CVE-2026-0112 In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502026-03-10 HIGH 7.0 CVE-2025-48641 In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no … Android No fix yet Fix from $1,9502026-03-02 HIGH 7.4 CVE-2025-48577 In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalatio… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.4 CVE-2025-48568 In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additi… Android Mitigation only Fix from $1,9502026-03-02 HIGH 7.5 CVE-2026-2319 Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 HIGH 7.0 CVE-2025-20801 In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious actor has a… Android Mitigation only Fix from $1,9502026-01-06 HIGH 7.4 CVE-2025-36934 In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to l… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.0 CVE-2025-36916 In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.0 CVE-2025-48625 In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen is off due to a race conditio… Android Mitigation only Fix from $1,9502025-12-08 HIGH 7.0 CVE-2025-48564 In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escalation of privilege with no add… Android Patch available Fix from $1,9502025-12-08 HIGH 7.5 CVE-2025-13721 Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… Chrome 143.0.7499.40 / 143.0.7499.41+ Fix from $1,9502025-12-02 HIGH 7.5 CVE-2024-7017 Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape v… Chrome 126.0.6478.182+ Fix from $1,9502025-11-14 HIGH 8.8 CVE-2025-12432 Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… Chrome 142.0.7444.59+ Fix from $1,9502025-11-10 HIGH 7.3 CVE-2025-48548 In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to a race co… Android Patch available Fix from $1,9502025-09-04 HIGH 7.0 CVE-2025-48533 In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition. This could lead to… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.0 CVE-2025-22442 In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work prof… Android Mitigation only Fix from $1,9502025-09-02 HIGH 8.8 CVE-2025-8880 Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… Chrome 139.0.7258.127+ Fix from $1,9502025-08-13 HIGH 8.4 CVE-2024-34732 In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502025-01-28 HIGH 7.0 CVE-2018-9461 In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This c… Android Patch available Fix from $1,9502025-01-18 MEDIUM 6.5 CVE-2025-0439 Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI… Chrome 132.0.6834.83+ Fix from $1,6002025-01-15 HIGH 7.0 CVE-2024-34731 In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escal… Android Patch available Fix from $1,9502024-08-15 HIGH 7.5 CVE-2024-6778 Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts… Chrome 126.0.6478.182+ Fix from $1,9502024-07-16 HIGH 7.0 CVE-2024-34724 In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privi… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-34725 In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalat… Android Mitigation only Fix from $1,9502024-07-09 HIGH 7.0 CVE-2024-31327 In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of … Android Patch available Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-32908 In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.0 CVE-2024-32899 In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to l… Android Mitigation only Fix from $1,9502024-06-13