Browse CVEs

MEDIUM 6.5 CVE-2024-4948 Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 125.0.6422.60+ Fix from $1,6002024-05-15 MEDIUM 6.5 CVE-2024-4949 Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 125.0.6422.60+ Fix from $1,6002024-05-15 MEDIUM 6.5 CVE-2024-4950 Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specifi… Chrome 125.0.6422.60+ Fix from $1,6002024-05-15 MEDIUM 6.5 CVE-2023-7258 A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible… Gvisor 20231204.0+ Fix from $1,6002024-05-15 HIGH 8.8 CVE-2024-4761 KEVEPSS 11% Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted H… Chrome 124.0.6367.207+ Fix from $1,9502024-05-14 CRITICAL 9.6 CVE-2024-4671 KEVEPSS 8% Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 124.0.6367.201+ Fix from $2,3002024-05-14 HIGH 7.8 CVE-2024-23713 In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improper input … Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-0024 In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input validation.… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-0025 In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error. This could lead to local esc… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-0042 In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to local bypass of DRM conten… Android No fix yet Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-0043 In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the code. This c… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-23704 In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check.… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-23705 In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-23706 In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This could lead to local escalation… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-23707 In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-23708 In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been acces… Android Patch available Fix from $1,9502024-05-07 HIGH 7.8 CVE-2024-23710 In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileged app du… Android Patch available Fix from $1,9502024-05-07 MEDIUM 6.5 CVE-2024-23709 In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with n… Android Patch available Fix from $1,6002024-05-07 MEDIUM 5.5 CVE-2024-0022 In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another user profil… Android Patch available Fix from $1,6002024-05-07 MEDIUM 5.5 CVE-2024-0026 In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local den… Android Patch available Fix from $1,6002024-05-07 MEDIUM 5.5 CVE-2024-0027 In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial … Android Patch available Fix from $1,6002024-05-07 MEDIUM 5.5 CVE-2024-23712 In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to resource exha… Android Patch available Fix from $1,6002024-05-07 CRITICAL 9.6 CVE-2024-4558 Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 14.6 / 17.6+ Fix from $2,3002024-05-07 MEDIUM 6.5 CVE-2024-4559 Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 124.0.6367.155+ Fix from $1,6002024-05-07 HIGH 7.8 CVE-2024-20064 In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no a… Android Mitigation only Fix from $1,9502024-05-06 HIGH 7.2 CVE-2024-20057 In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,9502024-05-06 MEDIUM 6.7 CVE-2023-32873 In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002024-05-06 MEDIUM 6.7 CVE-2024-20021 In atf spm, there is a possible way to remap physical memory to virtual memory due to a logic error. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,6002024-05-06 MEDIUM 6.7 CVE-2024-20059 In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002024-05-06 MEDIUM 5.9 CVE-2024-20060 In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002024-05-06