Browse CVEs

CRITICAL 9.8 CVE-2019-2036 In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2019-2204 In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code exe… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2019-2205 In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote co… Android Mitigation only Fix from $2,3002019-11-13 HIGH 8.8 CVE-2019-2206 In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2192 In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2193 In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lea… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2195 In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation. This could lead to loc… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2202 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalat… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2203 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalat… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2207 In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. This could lead to local esc… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.5 CVE-2019-2208 In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code … Android Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.7 CVE-2019-2199 In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2196 In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2197 In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to l… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2198 In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution p… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 6.5 CVE-2011-1802 WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (… Blink Mitigation only Fix from $1,6002019-11-12 MEDIUM 6.5 CVE-2011-1803 An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying t… Blink Mitigation only Fix from $1,6002019-11-12 MEDIUM 6.5 CVE-2011-2334 Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections. Blink Mitigation only Fix from $1,6002019-11-12 HIGH 7.5 CVE-2011-2335 A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. Blink Mitigation only Fix from $1,9502019-11-12 CRITICAL 9.8 CVE-2011-2337 A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. Blink Mitigation only Fix from $2,3002019-11-07 MEDIUM 6.5 CVE-2011-2336 An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation … Blink Mitigation only Fix from $1,6002019-11-07 MEDIUM 6.5 CVE-2011-2353 Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function. Blink Mitigation only Fix from $1,6002019-11-07 MEDIUM 6.5 CVE-2011-2807 Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13. Blink No fix yet Fix from $1,6002019-11-07 MEDIUM 6.5 CVE-2011-2808 A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed. Blink Mitigation only Fix from $1,6002019-11-06 HIGH 7.5 CVE-2019-5043 An exploitable denial-of-service vulnerability exists in the Weave daemon of the Nest Cam IQ Indoor, version 4620002. A set of TCP connections can ca… Nest Cam Iq Indoor Firmware No fix yet Fix from $1,9502019-10-31 HIGH 7.8 CVE-2019-16508 The Imagination Technologies driver for Chrome OS before R74-11895.B, R75 before R75-12105.B, and R76 before R76-12208.0.0 allows attackers to trigge… Chrome Os No fix yet Fix from $1,9502019-10-01 CRITICAL 9.8 CVE-2019-9459 In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional exec… Android Mitigation only Fix from $2,3002019-09-27 HIGH 7.5 CVE-2019-9462 In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional… Android Mitigation only Fix from $1,9502019-09-27 HIGH 7.3 CVE-2019-9463 In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502019-09-27 MEDIUM 5.5 CVE-2019-9435 In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiona… Android Mitigation only Fix from $1,6002019-09-27