Browse CVEs

HIGH 8.8 CVE-2024-10826 Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corrup… Chrome 130.0.6723.116+ Fix from $1,9502024-11-06 HIGH 8.8 CVE-2024-10488 Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 130.0.6723.92+ Fix from $1,9502024-10-29 HIGH 7.8 CVE-2024-47033 In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of pri… Android Mitigation only Fix from $1,9502024-10-25 HIGH 7.8 CVE-2024-47017 In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502024-10-25 HIGH 8.8 CVE-2024-9954 Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 130.0.6723.58+ Fix from $1,9502024-10-15 HIGH 8.8 CVE-2024-9955 Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 130.0.6723.58+ Fix from $1,9502024-10-15 HIGH 8.8 CVE-2024-9957 Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures … Chrome 130.0.6723.58+ Fix from $1,9502024-10-15 HIGH 8.8 CVE-2024-9959 Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 130.0.6723.58+ Fix from $1,9502024-10-15 HIGH 8.8 CVE-2024-9961 Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific … Chrome 130.0.6723.58+ Fix from $1,9502024-10-15 HIGH 7.5 CVE-2024-9960 Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 130.0.6723.58+ Fix from $1,9502024-10-15 HIGH 8.8 CVE-2024-9120 Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 129.0.6668.70+ Fix from $1,9502024-09-25 HIGH 8.8 CVE-2021-38023 Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 92.0.4515.107+ Fix from $1,9502024-09-23 HIGH 7.8 CVE-2024-8375 There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C+… Reverb 2024-08-05+ Fix from $1,9502024-09-19 HIGH 8.8 CVE-2024-8638 Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML p… Chrome 128.0.6613.137+ Fix from $1,9502024-09-11 HIGH 8.8 CVE-2024-8639 Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 128.0.6613.137+ Fix from $1,9502024-09-11 HIGH 8.8 CVE-2024-8636 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 128.0.6613.137+ Fix from $1,9502024-09-11 HIGH 8.8 CVE-2024-8637 Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption v… Chrome 128.0.6613.137+ Fix from $1,9502024-09-11 HIGH 7.0 CVE-2024-23716 In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502024-09-11 HIGH 8.8 CVE-2024-8362 Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 128.0.6613.119+ Fix from $1,9502024-09-03 HIGH 8.8 CVE-2024-7968 Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI inte… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 8.8 CVE-2024-7964 Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 HIGH 7.8 CVE-2024-32927 In sendDeviceState_1_6 of RadioExt.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502024-08-19 HIGH 8.8 CVE-2024-7536 Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7533 Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6991 Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6997 Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to po… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6998 Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gest… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7000 Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to pot… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6988 Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6989 Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 127.0.6533.72+ Fix from $1,9502024-08-06