Browse CVEs

HIGH 7.8 CVE-2024-0050 In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a loc… Android Patch available Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-0051 In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of priv… Android Patch available Fix from $1,9502024-03-11 MEDIUM 6.7 CVE-2024-0044 In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to loc… Android Patch available Fix from $1,6002024-03-11 MEDIUM 6.5 CVE-2024-0045 In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjac… Android Patch available Fix from $1,6002024-03-11 MEDIUM 5.5 CVE-2024-0047 In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to … Android Patch available Fix from $1,6002024-03-11 HIGH 8.8 CVE-2024-2174EPSS 13% Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 122.0.6261.111+ Fix from $1,9502024-03-06 HIGH 8.8 CVE-2024-2176 Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 122.0.6261.111+ Fix from $1,9502024-03-06 HIGH 8.8 CVE-2024-2173EPSS 14% Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a cra… Chrome 122.0.6261.111+ Fix from $1,9502024-03-06 HIGH 8.4 CVE-2024-20029 In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Sys… Android Mitigation only Fix from $1,9502024-03-04 HIGH 7.9 CVE-2024-20027 In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,9502024-03-04 HIGH 7.2 CVE-2024-20034 In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System e… Android Mitigation only Fix from $1,9502024-03-04 MEDIUM 6.7 CVE-2024-20025 In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002024-03-04 MEDIUM 6.7 CVE-2024-20031 In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002024-03-04 MEDIUM 6.7 CVE-2024-20032 In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System executi… Android Mitigation only Fix from $1,6002024-03-04 MEDIUM 6.7 CVE-2024-20037 In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002024-03-04 MEDIUM 6.6 CVE-2024-20028 In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002024-03-04 MEDIUM 6.0 CVE-2024-20024 In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution … Android Mitigation only Fix from $1,6002024-03-04 HIGH 8.2 CVE-2024-20005 In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,9502024-03-04 HIGH 8.8 CVE-2024-1938 Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML pa… Chrome 122.0.6261.94+ Fix from $1,9502024-02-29 HIGH 8.8 CVE-2024-1939 Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 122.0.6261.94+ Fix from $1,9502024-02-29 HIGH 8.8 CVE-2024-1669 Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a c… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1670EPSS 9% Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1673 Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1674 Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a … Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1675EPSS 11% Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 MEDIUM 6.5 CVE-2024-1671 Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy vi… Chrome 122.0.6261.57+ Fix from $1,6002024-02-21 MEDIUM 5.4 CVE-2024-1672 Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security … Chrome 122.0.6261.57+ Fix from $1,6002024-02-21 MEDIUM 5.4 CVE-2024-1676EPSS 19% Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML … Chrome 122.0.6261.57+ Fix from $1,6002024-02-21 HIGH 7.8 CVE-2024-0018 In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local… Android Patch available Fix from $1,9502024-02-16 HIGH 7.8 CVE-2024-0021 In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification listener se… Android Patch available Fix from $1,9502024-02-16