Browse CVEs

HIGH 8.6 CVE-2021-21207 Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to poten… Chrome 90.0.4430.72+ Fix from $1,9502021-04-26 HIGH 7.8 CVE-2021-0442 In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead… Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0429 In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no add… Android Patch available Fix from $1,9502021-04-13 HIGH 8.8 CVE-2021-21194 Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21195 Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21199 Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21193 KEVEPSS 10% Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 89.0.4389.90+ Fix from $1,9502021-03-16 HIGH 8.8 CVE-2021-21191 Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 89.0.4389.90+ Fix from $1,9502021-03-16 HIGH 7.8 CVE-2021-0395 In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502021-03-10 HIGH 7.8 CVE-2021-0399 In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502021-03-10 HIGH 8.8 CVE-2021-21179 Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption … Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 HIGH 8.8 CVE-2021-21180 Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 HIGH 8.8 CVE-2021-21188 Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 HIGH 8.8 CVE-2021-21167 Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 HIGH 8.8 CVE-2021-21159 Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 HIGH 8.8 CVE-2021-21162 Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 89.0.4389.72+ Fix from $1,9502021-03-09 CRITICAL 9.6 CVE-2021-21150 Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to … Chrome 88.0.4324.182+ Fix from $2,3002021-02-22 CRITICAL 9.6 CVE-2021-21151 Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HT… Chrome 88.0.4324.182+ Fix from $2,3002021-02-22 HIGH 7.8 CVE-2021-0332 In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privileg… Android Patch available Fix from $1,9502021-02-10 MEDIUM 6.5 CVE-2021-0335 In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure wi… Android Patch available Fix from $1,6002021-02-10 HIGH 7.8 CVE-2021-0330 In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of… Android Patch available Fix from $1,9502021-02-10 CRITICAL 9.6 CVE-2021-21142 Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a cra… Chrome 88.0.4324.146+ Fix from $2,3002021-02-09 CRITICAL 9.6 CVE-2021-21146 Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 88.0.4324.146+ Fix from $2,3002021-02-09 HIGH 8.8 CVE-2021-21145 Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 88.0.4324.146+ Fix from $1,9502021-02-09 HIGH 8.6 CVE-2021-21138 Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file. Chrome 88.0.4324.96+ Fix from $1,9502021-02-09 CRITICAL 9.6 CVE-2021-21121EPSS 6% Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a cra… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $2,3002021-02-09 CRITICAL 9.6 CVE-2021-21124EPSS 8% Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a s… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $2,3002021-02-09 HIGH 8.8 CVE-2021-21119EPSS 7% Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially expl… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21120EPSS 7% Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21122EPSS 7% Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09