Browse CVEs

HIGH 8.8 CVE-2024-5498 Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5157 Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… Chrome 125.0.6422.76+ Fix from $1,9502024-05-22 MEDIUM 6.5 CVE-2024-4948 Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 125.0.6422.60+ Fix from $1,6002024-05-15 MEDIUM 6.5 CVE-2024-4949 Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 125.0.6422.60+ Fix from $1,6002024-05-15 CRITICAL 9.6 CVE-2024-4671 KEVEPSS 8% Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 124.0.6367.201+ Fix from $2,3002024-05-14 CRITICAL 9.6 CVE-2024-4558 Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 14.6 / 17.6+ Fix from $2,3002024-05-07 CRITICAL 9.8 CVE-2024-2410 The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken … Protobuf 4.25.0+ Fix from $2,3002024-05-03 HIGH 8.8 CVE-2024-4331 Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 124.0.6367.118+ Fix from $1,9502024-05-01 HIGH 8.8 CVE-2024-4368 Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 124.0.6367.118+ Fix from $1,9502024-05-01 MEDIUM 6.5 CVE-2024-4060 Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 124.0.6367.78+ Fix from $1,6002024-05-01 MEDIUM 6.5 CVE-2024-3914 Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 124.0.6367.60+ Fix from $1,6002024-04-17 HIGH 8.8 CVE-2024-3834 Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 124.0.6367.60+ Fix from $1,9502024-04-17 HIGH 8.8 CVE-2024-3837 Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially expl… Chrome 124.0.6367.60+ Fix from $1,9502024-04-17 MEDIUM 6.5 CVE-2024-3515 Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 123.0.6312.122+ Fix from $1,6002024-04-10 HIGH 8.8 CVE-2024-3158 Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 123.0.6312.105+ Fix from $1,9502024-04-06 HIGH 8.8 CVE-2024-2883 Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 123.0.6312.86+ Fix from $1,9502024-03-26 HIGH 8.8 CVE-2024-2885 Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 123.0.6312.86+ Fix from $1,9502024-03-26 HIGH 7.5 CVE-2024-2886 Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page… Chrome 123.0.6312.86+ Fix from $1,9502024-03-26 HIGH 8.8 CVE-2024-2627 Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 123.0.6312.58+ Fix from $1,9502024-03-20 HIGH 8.8 CVE-2024-2400 Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 122.0.6261.128+ Fix from $1,9502024-03-13 HIGH 8.4 CVE-2024-27213 In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation o… Android Mitigation only Fix from $1,9502024-03-11 HIGH 8.4 CVE-2024-25985 In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502024-03-11 HIGH 8.4 CVE-2024-27205 there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileg… Android No fix yet Fix from $1,9502024-03-11 HIGH 8.8 CVE-2024-2176 Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 122.0.6261.111+ Fix from $1,9502024-03-06 HIGH 8.8 CVE-2024-1670EPSS 9% Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1673 Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 7.8 CVE-2023-21165 In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation… Android Patch available Fix from $1,9502024-02-16 HIGH 7.8 CVE-2023-40107 In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with … Android Patch available Fix from $1,9502024-02-15 HIGH 7.8 CVE-2023-40114 In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of p… Android Patch available Fix from $1,9502024-02-15 HIGH 7.8 CVE-2023-40115 In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with… Android Patch available Fix from $1,9502024-02-15