Browse CVEs

HIGH 8.8 CVE-2022-2859 Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI in… Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2998EPSS 30% Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specifi… Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3038 KEVEPSS 25% Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3039 Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2852 Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 7.0 CVE-2021-0697 In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502022-09-13 HIGH 7.8 CVE-2022-36847 Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions. Android Mitigation only Fix from $1,9502022-09-09 HIGH 7.8 CVE-2022-36849 Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform mal… Android Mitigation only Fix from $1,9502022-09-09 HIGH 7.8 CVE-2022-36855 A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Android Mitigation only Fix from $1,9502022-09-09 MEDIUM 6.7 CVE-2022-26453 In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privil… Android Mitigation only Fix from $1,6002022-09-06 CRITICAL 9.8 CVE-2021-39815 The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the p… Android Mitigation only Fix from $2,3002022-08-24 CRITICAL 9.8 CVE-2022-20122 The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the p… Android Mitigation only Fix from $2,3002022-08-24 HIGH 8.8 CVE-2022-2613 Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2614 Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2621 Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to pot… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2603 Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2604 Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2606 Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Ent… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20325 In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution p… Android Mitigation only Fix from $1,9502022-08-12 MEDIUM 6.7 CVE-2022-20306 In Camera Provider HAL, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002022-08-12 MEDIUM 6.7 CVE-2022-20379 In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20372 In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with S… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20158 In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of… Android Patch available Fix from $1,6002022-08-11 HIGH 8.8 CVE-2022-2399 Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 100.0.4896.88+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-2480EPSS 18% Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 103.0.5060.134+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-2481 Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactio… Chrome 103.0.5060.134+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-2163 Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extens… Chrome 103.0.5060.134+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-2296 Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in s… Chrome 103.0.5060.114+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-2477 Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 103.0.5060.134+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-2478 Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 103.0.5060.134+ Fix from $1,9502022-07-28