Browse CVEs

HIGH 7.7 CVE-2024-40676 In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.8 CVE-2025-0291EPSS 8% Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 131.0.6778.264+ Fix from $1,9502025-01-08 HIGH 8.8 CVE-2024-12692EPSS 7% Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 131.0.6778.204+ Fix from $1,9502024-12-18 HIGH 8.8 CVE-2024-12381 Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 131.0.6778.139+ Fix from $1,9502024-12-12 HIGH 8.8 CVE-2024-12053 Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML p… Chrome 131.0.6778.108+ Fix from $1,9502024-12-03 HIGH 7.8 CVE-2018-9471 In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation… Android Patch available Fix from $1,9502024-11-20 HIGH 8.8 CVE-2024-11395 Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 131.0.6778.85+ Fix from $1,9502024-11-19 HIGH 7.8 CVE-2018-9339 In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to l… Android Patch available Fix from $1,9502024-11-19 MEDIUM 6.7 CVE-2024-20106 In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-11-04 HIGH 8.8 CVE-2024-10231 Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 130.0.6723.69+ Fix from $1,9502024-10-22 HIGH 8.8 CVE-2024-10230 Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 130.0.6723.69+ Fix from $1,9502024-10-22 HIGH 8.8 CVE-2024-9859 Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (… Chrome 126.0.6478.126+ Fix from $1,9502024-10-11 HIGH 8.8 CVE-2024-9603 Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 129.0.6668.100+ Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-9602 Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML p… Chrome 129.0.6668.100+ Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-9122EPSS 6% Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page… Chrome 129.0.6668.70+ Fix from $1,9502024-09-25 HIGH 8.8 CVE-2024-8904 Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 129.0.6668.58+ Fix from $1,9502024-09-17 HIGH 8.8 CVE-2024-8638 Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML p… Chrome 128.0.6613.137+ Fix from $1,9502024-09-11 HIGH 8.8 CVE-2024-8194 Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 128.0.6613.113+ Fix from $1,9502024-08-28 CRITICAL 9.6 CVE-2024-7971 KEVEPSS 21% Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium … Chrome 128.0.2739.42 / 128.0.6613.84+ Fix from $2,3002024-08-21 HIGH 8.8 CVE-2024-7969 Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 128.0.6613.84+ Fix from $1,9502024-08-21 MEDIUM 5.5 CVE-2024-34742 In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. Th… Android Patch available Fix from $1,6002024-08-15 HIGH 8.8 CVE-2024-7550 Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 CRITICAL 9.8 CVE-2024-20078 In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privil… Android Mitigation only Fix from $2,3002024-07-01 HIGH 8.8 CVE-2024-6100 Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium … Chrome 126.0.6478.114+ Fix from $1,9502024-06-20 HIGH 7.8 CVE-2024-32919 In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation … Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.4 CVE-2024-32922 In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could l… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.8 CVE-2024-32892 In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege w… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 6.5 CVE-2024-5843 Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious … Chrome 126.0.6478.54+ Fix from $1,6002024-06-11 HIGH 8.8 CVE-2024-5830 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pa… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5833 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a craft… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11