Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing p…
In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege…
In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. Th…
In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This co…
In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background…
In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error i…
In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This …
In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg…
In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local informati…
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Andr…
Chrome
HIGH 8.8
Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a c…
Chrome
HIGH 8.8
Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
Chrome
HIGH 8.8
Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…
Chrome
HIGH 8.8
Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …
In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio…
In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exec…
In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exec…
In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges…
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System exec…
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System exec…
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution …
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution …
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privilege…
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privilege…
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges neede…
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges ne…
In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.