Vulnerability index

Browse CVEs

1,820 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use After FreeCWE-416 × clear
Android HIGH 7.8
CVE-2022-20566

In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no…

Patch available
Fix from $1,950 2022-12-16
Android HIGH 7.8
CVE-2022-20568

In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no…

Patch available
Fix from $1,950 2022-12-16
Android MEDIUM 6.7
CVE-2022-20571

In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escala…

Patch available
Fix from $1,600 2022-12-16
Android HIGH 7.8
CVE-2022-20540

In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalat…

Patch available
Fix from $1,950 2022-12-16
Android MEDIUM 6.7
CVE-2022-20554

In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege wi…

Patch available
Fix from $1,600 2022-12-16
Android MEDIUM 5.5
CVE-2022-20552

In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local inform…

Patch available
Fix from $1,600 2022-12-16
Android HIGH 7.8
CVE-2022-20524

In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege wi…

Patch available
Fix from $1,950 2022-12-16
Android MEDIUM 6.7
CVE-2022-20514

In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out o…

Patch available
Fix from $1,600 2022-12-16
Chrome HIGH 8.8
CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…

Fix: 108.0.5359.124+
Fix from $1,950 2022-12-14
Chrome HIGH 8.8
CVE-2022-4438

Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI int…

Fix: 108.0.5359.124+
Fix from $1,950 2022-12-14
Chrome HIGH 8.8
CVE-2022-4439

Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI …

Fix: 108.0.5359.124+
Fix from $1,950 2022-12-14
Chrome HIGH 8.8
CVE-2022-4440

Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HT…

Fix: 108.0.5359.124+
Fix from $1,950 2022-12-14
Chrome HIGH 8.8
CVE-2022-4436

Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted…

Fix: 108.0.5359.124+
Fix from $1,950 2022-12-14
Android MEDIUM 5.5
CVE-2022-20502

In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclos…

Patch available
Fix from $1,600 2022-12-13
Android MEDIUM 5.5
CVE-2022-20496

In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local info…

Patch available
Fix from $1,600 2022-12-13
Android MEDIUM 5.5
CVE-2022-42754

In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.

Mitigation only
Fix from $1,600 2022-12-06
Chrome HIGH 8.8
CVE-2022-4194

Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafte…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4175

Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a craft…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4177

Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially …

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4178EPSS 24%

Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially expl…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4179

Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentia…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4180

Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potential…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4181

Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4191

Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-4192

Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI intera…

Fix: 108.0.5359.71+
Fix from $1,950 2022-11-30
Chrome HIGH 8.8
CVE-2022-3449

Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to…

Fix: 106.0.5249.119+
Fix from $1,950 2022-11-09
Chrome HIGH 8.8
CVE-2022-3450

Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a cra…

Fix: 106.0.5249.119+
Fix from $1,950 2022-11-09
Chrome HIGH 8.8
CVE-2022-3448

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI ge…

Fix: 106.0.5249.119+
Fix from $1,950 2022-11-09
Chrome HIGH 8.8
CVE-2022-3445

Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

Fix: 106.0.5249.119+
Fix from $1,950 2022-11-09
Chrome HIGH 8.8
CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a …

Fix: 107.0.5304.106+
Fix from $1,950 2022-11-09