Browse CVEs

MEDIUM 6.8 CVE-2023-3742 Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restricti… Chrome 114.0.5735.90+ Fix from $1,6002023-12-20 HIGH 8.8 CVE-2023-6702EPSS 44% Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 120.0.2210.77 / 120.0.6099.109+ Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-6703 Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 120.0.6099.109+ Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-6704 Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted ima… Chrome 120.0.6099.109+ Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-6705 Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 120.0.6099.109+ Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-6706 Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction … Chrome 120.0.6099.109+ Fix from $1,9502023-12-14 HIGH 8.8 CVE-2023-6707 Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 120.0.6099.109+ Fix from $1,9502023-12-14 CRITICAL 9.8 CVE-2023-48417 Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application Chromecast Firmware 2023-10-01+ Fix from $2,3002023-12-11 CRITICAL 9.8 CVE-2023-48424 U-Boot shell vulnerability resulting in Privilege escalation in a production device Chromecast Firmware 2023-10-01+ Fix from $2,3002023-12-11 CRITICAL 9.8 CVE-2023-48425 U-Boot vulnerability resulting in persistent Code Execution  Chromecast Firmware 2023-10-01+ Fix from $2,3002023-12-11 CRITICAL 9.8 CVE-2023-6181 An oversight in BCB handling of reboot reason that allows for persistent code execution Chromecast Firmware 2023-10-01+ Fix from $2,3002023-12-11 CRITICAL 9.8 CVE-2023-48423 In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executi… Android Mitigation only Fix from $2,3002023-12-08 HIGH 7.8 CVE-2023-48409 In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds … Android Mitigation only Fix from $1,9502023-12-08 HIGH 7.8 CVE-2023-48421 In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possible out of … Android Mitigation only Fix from $1,9502023-12-08 HIGH 7.5 CVE-2023-48410 In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure … Android Mitigation only Fix from $1,9502023-12-08 HIGH 7.5 CVE-2023-48416 In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no addition… Android No fix yet Fix from $1,9502023-12-08 MEDIUM 6.7 CVE-2023-48414 In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 6.4 CVE-2023-48420 there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed.… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 5.5 CVE-2023-48411 In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. T… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 5.5 CVE-2023-48412 In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. This could lead to local inform… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 5.5 CVE-2023-48415 In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 5.5 CVE-2023-48422 In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclos… Android Mitigation only Fix from $1,6002023-12-08 HIGH 7.8 CVE-2023-48407 there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502023-12-08 HIGH 7.5 CVE-2023-48403 In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote informatio… Android Mitigation only Fix from $1,9502023-12-08 HIGH 7.5 CVE-2023-48404 In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This … Android Mitigation only Fix from $1,9502023-12-08 MEDIUM 6.7 CVE-2023-48405 there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 6.7 CVE-2023-48406 there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalat… Android Mitigation only Fix from $1,6002023-12-08 MEDIUM 5.5 CVE-2023-48408 In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t… Android Mitigation only Fix from $1,6002023-12-08 HIGH 7.8 CVE-2023-48402 In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no addit… Android Mitigation only Fix from $1,9502023-12-08 HIGH 7.5 CVE-2023-48398 In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds che… Android Mitigation only Fix from $1,9502023-12-08