Browse CVEs

MEDIUM 5.5 CVE-2023-35675 In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the sam… Android Mitigation only Fix from $1,6002023-09-11 MEDIUM 5.5 CVE-2023-35677 In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to loca… Android Mitigation only Fix from $1,6002023-09-11 MEDIUM 5.5 CVE-2023-35679 In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002023-09-11 MEDIUM 5.5 CVE-2023-35680 In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local informa… Android Mitigation only Fix from $1,6002023-09-11 MEDIUM 5.5 CVE-2023-35683 In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to loca… Android Patch available Fix from $1,6002023-09-11 HIGH 8.8 CVE-2023-35658 In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/a… Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35665 In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalati… Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35666 In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privil… Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35667 In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic erro… Android Patch available Fix from $1,9502023-09-11 HIGH 7.8 CVE-2023-35669 In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deseriali… Android Patch available Fix from $1,9502023-09-11 MEDIUM 5.5 CVE-2023-35664 In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local inform… Android Patch available Fix from $1,6002023-09-11 HIGH 8.8 CVE-2023-4762 KEVEPSS 40% Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium … Chrome 116.0.1938.76 / 116.0.5845.179+ Fix from $1,9502023-09-05 HIGH 8.8 CVE-2023-4763 Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 116.0.5845.179+ Fix from $1,9502023-09-05 HIGH 8.1 CVE-2023-4761 Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to p… Chrome 116.0.5845.179+ Fix from $1,9502023-09-05 MEDIUM 6.5 CVE-2023-4764 Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) vi… Chrome 116.0.5845.179+ Fix from $1,6002023-09-05 MEDIUM 6.5 CVE-2023-32805 In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.3 CVE-2023-20851 In stc, there is a possible out of bounds read due to a race condition. This could lead to local escalation of privilege with System execution privil… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.7 CVE-2023-20837 In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.4 CVE-2023-20834 In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.4 CVE-2023-20827 In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 5.5 CVE-2023-20825 In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no a… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 5.5 CVE-2023-20826 In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additio… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.7 CVE-2023-20822 In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 5.5 CVE-2023-20824 In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no a… Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 6.7 CVE-2023-38553 In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 5.5 CVE-2023-38466 In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges Android Mitigation only Fix from $1,6002023-09-04 MEDIUM 5.5 CVE-2023-38554 In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additiona… Android Mitigation only Fix from $1,6002023-09-04 HIGH 7.8 CVE-2023-38449 In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileg… Android Mitigation only Fix from $1,9502023-09-04 HIGH 7.8 CVE-2023-38450 In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileg… Android Mitigation only Fix from $1,9502023-09-04 HIGH 7.8 CVE-2023-38451 In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileg… Android Mitigation only Fix from $1,9502023-09-04