Browse CVEs

MEDIUM 5.5 CVE-2021-25415 Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writ… Android Mitigation only Fix from $1,6002021-06-11 MEDIUM 5.5 CVE-2021-25393 Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system ui… Android No fix yet Fix from $1,6002021-06-11 MEDIUM 6.1 CVE-2019-13714 Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS… Chrome 78.0.3904.70+ Fix from $1,6002019-11-25 HIGH 8.8 CVE-2016-9651EPSS 11% A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute ar… Chrome 55.0.2883.75+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2016-5149 The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to … Chrome after 52.0.2743.116 Fix from $1,9502016-09-11 HIGH 10.0 CVE-2014-3188EPSS 6% Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remot… Chrome Os after 38.0.2125.77 Fix from $1,9502014-10-08 HIGH 10.0 CVE-2014-3176EPSS 10% Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attac… Chrome after 37.0.2062.93 Fix from $1,9502014-08-27 HIGH 10.0 CVE-2014-3177 Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attac… Chrome after 37.0.2062.93 Fix from $1,9502014-08-27 HIGH 7.5 CVE-2014-1716 Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.1… Chrome after 34.0.1847.115 Fix from $1,9502014-04-09 HIGH 7.5 CVE-2014-1939 java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchB… Android after 4.3.1 Fix from $1,9502014-03-03 HIGH 7.5 CVE-2013-0912 WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion." Chrome Mitigation only Fix from $1,9502013-03-11 HIGH 10.0 CVE-2012-5142 Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a den… Chrome after 23.0.1271.96 Fix from $1,9502012-12-12 HIGH 9.3 CVE-2011-2478 Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code… Sketchup after 7.1 Fix from $1,9502012-04-17 HIGH 9.3 CVE-2011-2747 Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary … Picasa after 3.6_build_105.65 Fix from $1,9502011-07-28 HIGH 9.3 CVE-2010-2297 rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (applicat… Chrome 5.0.375.70+ Fix from $1,9502010-06-15 HIGH 9.3 CVE-2010-0647 WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malfo… Chrome after 4.0.249.78 Fix from $1,9502010-02-18 MEDIUM 6.9 CVE-2009-2348 Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_R… Android Mitigation only Fix from $1,6002009-07-17 MEDIUM 6.8 CVE-2008-5749 Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --render… Chrome No fix yet Fix from $1,6002008-12-29