Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chrome HIGH 8.8
CVE-2022-4921

Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestur…

Fix: 99.0.4844.51+
Fix from $1,950 2023-07-29
Chrome MEDIUM 6.5
CVE-2022-4911

Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a cr…

Fix: 106.0.5249.62+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2022-4913

Inappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process…

Fix: 105.0.5195.52+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2022-4915

Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofing via a cr…

Fix: 103.0.5060.134+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2022-4922

Inappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform UI spoofing via a crafted HTML page…

Fix: 99.0.4844.51+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2022-4925

Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via m…

Fix: 97.0.4692.71+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2022-4926

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119 allowed a remote attacker to bypass same origin policy…

Fix: 109.0.5414.119+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2023-2311

Insufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass filesystem restriction…

Fix: 112.0.5615.49+
Fix from $1,600 2023-07-29
Chrome MEDIUM 5.4
CVE-2022-4910

Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass navigation restrictions via a cr…

Fix: 107.0.5304.62+
Fix from $1,600 2023-07-29
Chrome HIGH 8.8
CVE-2021-4317

Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Ch…

Fix: 96.0.4664.93+
Fix from $1,950 2023-07-29
Chrome HIGH 8.8
CVE-2021-4318

Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit object corruption via a crafted HT…

Fix: 94.0.4606.54+
Fix from $1,950 2023-07-29
Chrome HIGH 8.8
CVE-2021-4319

Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Ch…

Fix: 93.0.4577.82+
Fix from $1,950 2023-07-29
Chrome HIGH 8.8
CVE-2021-4320

Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitra…

Fix: 92.0.4515.107+
Fix from $1,950 2023-07-29
Chrome HIGH 8.8
CVE-2021-4322

Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execut…

Fix: 91.0.4472.77+
Fix from $1,950 2023-07-29
Chrome HIGH 8.8
CVE-2022-4906EPSS 13%

Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted…

Fix: 108.0.5359.71+
Fix from $1,950 2023-07-29
Chrome HIGH 8.8
CVE-2022-4907

Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte…

Fix: 108.0.5359.71+
Fix from $1,950 2023-07-29
Chrome MEDIUM 6.5
CVE-2021-4323

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a…

Fix: 90.0.4430.72+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.5
CVE-2021-4324

Insufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to read arbitrary files via a malic…

Fix: 90.0.4430.93+
Fix from $1,600 2023-07-29
Chrome MEDIUM 6.3
CVE-2022-4909

Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a cra…

Fix: 107.0.5304.62+
Fix from $1,600 2023-07-29
Chrome HIGH 8.8
CVE-2023-3598

Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a …

Fix: 114.0.5735.90+
Fix from $1,950 2023-07-28
Nest Hub Max Firmware HIGH 8.8
CVE-2023-2626

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes …

Fix: 1.56.368671 / 1.63.355999+
Fix from $1,950 2023-07-25
Android HIGH 7.8
CVE-2023-35692

In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. T…

Mitigation only
Fix from $1,950 2023-07-14
Android MEDIUM 5.5
CVE-2023-21260

In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and…

Mitigation only
Fix from $1,600 2023-07-13
Android HIGH 7.8
CVE-2023-21254

In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a …

Patch available
Fix from $1,950 2023-07-13
Android HIGH 7.8
CVE-2023-21256

In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could le…

Patch available
Fix from $1,950 2023-07-13
Android HIGH 7.8
CVE-2023-21257

In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission …

Patch available
Fix from $1,950 2023-07-13
Android HIGH 7.8
CVE-2023-21399

there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no…

Mitigation only
Fix from $1,950 2023-07-13
Android HIGH 7.5
CVE-2023-35694

In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remo…

Mitigation only
Fix from $1,950 2023-07-13
Android HIGH 7.2
CVE-2023-35691

there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges ne…

No fix yet
Fix from $1,950 2023-07-13
Android MEDIUM 6.7
CVE-2023-35693

In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege w…

Patch available
Fix from $1,600 2023-07-13