Browse CVEs

HIGH 7.8 CVE-2022-20566 In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no… Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20568 In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escalation of privilege with no… Android Patch available Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20571 In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. This could lead to local escala… Android Patch available Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20540 In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalat… Android Patch available Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20554 In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20552 In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. This could lead to local inform… Android Patch available Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20524 In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,9502022-12-16 MEDIUM 6.7 CVE-2022-20514 In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out o… Android Patch available Fix from $1,6002022-12-16 HIGH 8.8 CVE-2022-4437 Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4438 Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI int… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4439 Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI … Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4440 Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4436 Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 MEDIUM 5.5 CVE-2022-20502 In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclos… Android Patch available Fix from $1,6002022-12-13 MEDIUM 5.5 CVE-2022-20496 In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local info… Android Patch available Fix from $1,6002022-12-13 MEDIUM 5.5 CVE-2022-42754 In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 HIGH 8.8 CVE-2022-4194 Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4175 Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4177 Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially … Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4178EPSS 24% Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially expl… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4179 Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentia… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4180 Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potential… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4181 Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4191 Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-4192 Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI intera… Chrome 108.0.5359.71+ Fix from $1,9502022-11-30 HIGH 8.8 CVE-2022-3449 Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3450 Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3448 Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI ge… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3445 Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3886 Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 107.0.5304.106+ Fix from $1,9502022-11-09