Browse CVEs

CRITICAL 9.0 CVE-2020-15207 In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses `ResolveAxis` … Tensorflow 1.15.4 / 2.0.3+ Fix from $2,3002020-09-25 MEDIUM 5.9 CVE-2020-15200 In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not validate that the input arguments form a valid ragged tenso… Tensorflow Patch available Fix from $1,6002020-09-25 HIGH 8.8 CVE-2020-15195 In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation of `SparseFillEmptyRowsGrad` uses a double indexing pattern. … Tensorflow 1.15.4 / 2.0.3+ Fix from $1,9502020-09-25 HIGH 8.8 CVE-2020-6576 Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 85.0.4183.102+ Fix from $1,9502020-09-21 MEDIUM 6.3 CVE-2020-6569 Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially e… Chrome 85.0.4183.83+ Fix from $1,6002020-09-21 HIGH 8.8 CVE-2020-6549EPSS 29% Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6550EPSS 29% Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6551EPSS 29% Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6552 Use after free in Blink in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6553 Use after free in offline mode in Google Chrome on iOS prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6556 Heap buffer overflow in SwiftShader in Google Chrome prior to 84.0.4147.135 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6559 Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 85.0.4183.83+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6532 Use after free in SCTP in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 84.0.4147.105+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6539 Use after free in CSS in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 84.0.4147.105+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6540 Buffer overflow in Skia in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.105+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6541EPSS 23% Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 84.0.4147.105+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6542 Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6543 Use after free in task scheduling in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6544 Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6545 Use after free in audio in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-6548 Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentiall… Chrome 84.0.4147.125+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-15960 Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access … Chrome 85.0.4183.121+ Fix from $1,9502020-09-21 HIGH 8.8 CVE-2020-15964 Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 85.0.4183.121+ Fix from $1,9502020-09-21 MEDIUM 6.7 CVE-2020-0334 In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002020-09-18 MEDIUM 6.7 CVE-2020-0335 In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002020-09-18 MEDIUM 6.7 CVE-2020-0347 In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,6002020-09-18 MEDIUM 6.7 CVE-2020-0350 In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002020-09-18 HIGH 7.8 CVE-2020-0319 In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,9502020-09-18 MEDIUM 6.7 CVE-2020-0309 In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with Sy… Android Mitigation only Fix from $1,6002020-09-18 MEDIUM 6.7 CVE-2020-0326 In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002020-09-18