Browse CVEs

HIGH 7.8 CVE-2019-2174 In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1, and 9, there is a possible use after free due to improper… Android Patch available Fix from $1,9502019-09-05 HIGH 7.8 CVE-2019-2127 In AudioInputDescriptor::setClientActive of AudioInputDescriptor.cpp, there is possible memory corruption due to a use after free. This could lead to… Android Mitigation only Fix from $1,9502019-08-20 CRITICAL 9.8 CVE-2019-2111 In loop of DnsTlsSocket.cpp, there is a possible heap memory corruption due to a use after free. This could lead to remote code execution in the netd… Android Mitigation only Fix from $2,3002019-07-08 HIGH 7.8 CVE-2019-2112 In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additi… Android Mitigation only Fix from $1,9502019-07-08 HIGH 8.8 CVE-2019-5809 Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform … Chrome 74.0.3729.108+ Fix from $1,9502019-06-27 HIGH 8.8 CVE-2019-5813 Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 74.0.3729.108+ Fix from $1,9502019-06-27 HIGH 8.8 CVE-2019-5828 Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory … Chrome 75.0.3770.80+ Fix from $1,9502019-06-27 HIGH 8.8 CVE-2019-5808 Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 74.0.3729.108+ Fix from $1,9502019-06-27 MEDIUM 6.5 CVE-2018-6155 Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruptio… Chrome 68.0.3440.75+ Fix from $1,6002019-06-27 MEDIUM 6.5 CVE-2019-5786 KEVEPSS 62% Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access v… Chrome 72.0.3626.121+ Fix from $1,6002019-06-27 MEDIUM 6.5 CVE-2019-5805 Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF f… Chrome 74.0.3729.108+ Fix from $1,6002019-06-27 MEDIUM 5.7 CVE-2018-6171 Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtai… Chrome 68.0.3440.75+ Fix from $1,6002019-06-27 HIGH 8.8 CVE-2018-6118 A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attack… Chrome 66.0.3359.139+ Fix from $1,9502019-06-27 HIGH 8.8 CVE-2018-17479 Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corr… Chrome 70.0.3538.110+ Fix from $1,9502019-06-27 HIGH 7.8 CVE-2019-2024 In em28xx_unregister_dvb of em28xx-dvb.c, there is a possible use after free issue. This could lead to local escalation of privilege with no addition… Android Mitigation only Fix from $1,9502019-06-19 HIGH 7.8 CVE-2019-2025 In binder_thread_read of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in th… Android Mitigation only Fix from $1,9502019-06-19 CRITICAL 9.8 CVE-2019-2006 In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of priv… Android Mitigation only Fix from $2,3002019-06-19 HIGH 7.0 CVE-2019-2095 In callGenIDChangeListeners and related functions of SkPixelRef.cpp, there is a possible use after free due to a race condition. This could lead to r… Android Mitigation only Fix from $1,9502019-06-07 HIGH 8.8 CVE-2019-5787 Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 73.0.3683.75+ Fix from $1,9502019-05-23 HIGH 8.8 CVE-2019-5788EPSS 9% An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had… Chrome 73.0.3683.75+ Fix from $1,9502019-05-23 HIGH 8.8 CVE-2019-5789EPSS 9% An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had com… Chrome 73.0.3683.75+ Fix from $1,9502019-05-23 HIGH 7.8 CVE-2019-2049 In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc, there is a possible memory corruption due to a use after free. This could lead to local … Android Mitigation only Fix from $1,9502019-05-08 HIGH 7.8 CVE-2019-2050 In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation o… Android Mitigation only Fix from $1,9502019-05-08 CRITICAL 9.8 CVE-2019-2030 In removeInterfaceAddress of NetworkController.cpp, there is a possible use after free. This could lead to remote code execution with no additional e… Android Patch available Fix from $2,3002019-04-19 HIGH 8.8 CVE-2019-2029 In btm_proc_smp_cback of tm_ble.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution with no a… Android Patch available Fix from $1,9502019-04-19 HIGH 7.8 CVE-2019-2033 In create_hdr of dnssd_clientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional executio… Android Patch available Fix from $1,9502019-04-19 HIGH 7.8 CVE-2019-2000 In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with … Android No fix yet Fix from $1,9502019-02-28 HIGH 7.5 CVE-2019-1992 In bta_hl_sdp_query_results of bta_hl_main.cc, there is a possible use-after-free due to a race condition. This could lead to remote code execution w… Android Mitigation only Fix from $1,9502019-02-28 HIGH 8.8 CVE-2019-5772 Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially explo… Chrome 72.0.3626.81+ Fix from $1,9502019-02-19 CRITICAL 9.6 CVE-2019-5759 Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentiall… Chrome 72.0.3626.81+ Fix from $2,3002019-02-19