Browse CVEs

HIGH 7.0 CVE-2017-7372 In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to… Android Patch available Fix from $1,9502017-06-13 MEDIUM 5.9 CVE-2017-8242 In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write. Android Patch available Fix from $1,6002017-06-13 HIGH 7.0 CVE-2014-9966 In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.0 CVE-2015-9022 In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs. Android Mitigation only Fix from $1,9502017-06-13 HIGH 7.0 CVE-2014-9941 In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could p… Android Patch available Fix from $1,9502017-06-06 HIGH 7.0 CVE-2016-10297 In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exis… Android Patch available Fix from $1,9502017-06-06 HIGH 7.0 CVE-2016-10242 A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel. Android Patch available Fix from $1,9502017-05-16 HIGH 7.0 CVE-2014-9936 In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using t… Android Patch available Fix from $1,9502017-05-16 HIGH 7.0 CVE-2015-8996 In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux … Android Patch available Fix from $1,9502017-05-16 HIGH 7.0 CVE-2015-8997 In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linu… Android Patch available Fix from $1,9502017-05-16 HIGH 7.0 CVE-2017-8244 In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->fille… Android Mitigation only Fix from $1,9502017-05-12 HIGH 8.1 CVE-2017-5035 Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information f… Chrome after 57.0.2987.75 Fix from $1,9502017-04-24 HIGH 7.8 CVE-2016-3914 Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2… Android Patch available Fix from $1,9502016-10-10 HIGH 7.5 CVE-2016-3760 Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairin… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.5 CVE-2016-3744 Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a… Android Mitigation only Fix from $1,9502016-07-11 MEDIUM 5.3 CVE-2016-1670 Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome b… Chrome after 50.0.2661.87 Fix from $1,6002016-05-14 HIGH 8.4 CVE-2016-0848 Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to… Android Patch available Fix from $1,9502016-04-18 HIGH 9.3 CVE-2015-6789 Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a deni… Chrome after 47.0.2526.73 Fix from $1,9502015-12-14 MEDIUM 6.8 CVE-2015-6761 The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies o… Chrome after 45.0.2454.101 Fix from $1,6002015-10-15 MEDIUM 6.8 CVE-2015-1234 Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of … Chrome after 41.0.2272.102 Fix from $1,6002015-04-01 MEDIUM 6.8 CVE-2013-2906 Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a de… Chrome after 30.0.1599.65 Fix from $1,6002013-10-02 MEDIUM 6.8 CVE-2013-2847 Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-fre… Chrome after 27.0.1453.91 Fix from $1,6002013-05-22 HIGH 7.5 CVE-2013-0907 Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact v… Chrome after 25.0.1364.126 Fix from $1,9502013-03-05 MEDIUM 6.8 CVE-2013-0900 Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before … Chrome 25.0.1364.97 / 25.0.1364.99+ Fix from $1,6002013-02-23 MEDIUM 6.8 CVE-2013-0893 Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a den… Chrome 25.0.1364.97 / 25.0.1364.99+ Fix from $1,6002013-02-23 MEDIUM 6.8 CVE-2012-5119 Race condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service or possibly have unspeci… Chrome after 23.0.1271.62 Fix from $1,6002012-11-07 HIGH 9.3 CVE-2012-5108 Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices. Chrome after 22.0.1229.91 Fix from $1,9502012-10-09 HIGH 7.5 CVE-2012-2880 Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi… Chrome after 22.0.1229.78 Fix from $1,9502012-09-26 MEDIUM 6.8 CVE-2012-2868 Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi… Chrome after 21.0.1180.88 Fix from $1,6002012-08-31 MEDIUM 6.2 CVE-2012-3483 Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file. Tunnelblick after 3.3beta20 Fix from $1,6002012-08-26