Browse CVEs

HIGH 8.8 CVE-2022-4921 Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestur… Chrome 99.0.4844.51+ Fix from $1,9502023-07-29 MEDIUM 6.5 CVE-2022-4911 Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a cr… Chrome 106.0.5249.62+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2022-4913 Inappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process… Chrome 105.0.5195.52+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2022-4915 Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofing via a cr… Chrome 103.0.5060.134+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2022-4922 Inappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform UI spoofing via a crafted HTML page… Chrome 99.0.4844.51+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2022-4925 Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via m… Chrome 97.0.4692.71+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2022-4926 Insufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119 allowed a remote attacker to bypass same origin policy… Chrome 109.0.5414.119+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2023-2311 Insufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass filesystem restriction… Chrome 112.0.5615.49+ Fix from $1,6002023-07-29 MEDIUM 5.4 CVE-2022-4910 Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass navigation restrictions via a cr… Chrome 107.0.5304.62+ Fix from $1,6002023-07-29 HIGH 8.8 CVE-2021-4317 Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Ch… Chrome 96.0.4664.93+ Fix from $1,9502023-07-29 HIGH 8.8 CVE-2021-4318 Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit object corruption via a crafted HT… Chrome 94.0.4606.54+ Fix from $1,9502023-07-29 HIGH 8.8 CVE-2021-4319 Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Ch… Chrome 93.0.4577.82+ Fix from $1,9502023-07-29 HIGH 8.8 CVE-2021-4320 Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitra… Chrome 92.0.4515.107+ Fix from $1,9502023-07-29 HIGH 8.8 CVE-2021-4322 Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execut… Chrome 91.0.4472.77+ Fix from $1,9502023-07-29 HIGH 8.8 CVE-2022-4906EPSS 13% Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted… Chrome 108.0.5359.71+ Fix from $1,9502023-07-29 HIGH 8.8 CVE-2022-4907 Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafte… Chrome 108.0.5359.71+ Fix from $1,9502023-07-29 MEDIUM 6.5 CVE-2021-4323 Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a… Chrome 90.0.4430.72+ Fix from $1,6002023-07-29 MEDIUM 6.5 CVE-2021-4324 Insufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to read arbitrary files via a malic… Chrome 90.0.4430.93+ Fix from $1,6002023-07-29 MEDIUM 6.3 CVE-2022-4909 Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a cra… Chrome 107.0.5304.62+ Fix from $1,6002023-07-29 HIGH 8.8 CVE-2023-3598 Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 114.0.5735.90+ Fix from $1,9502023-07-28 HIGH 8.8 CVE-2023-2626 There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes … Nest Hub Max Firmware 1.56.368671 / 1.63.355999+ Fix from $1,9502023-07-25 HIGH 7.8 CVE-2023-35692 In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. T… Android Mitigation only Fix from $1,9502023-07-14 MEDIUM 5.5 CVE-2023-21260 In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user prompt and… Android Mitigation only Fix from $1,6002023-07-13 HIGH 7.8 CVE-2023-21254 In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed due to a … Android Patch available Fix from $1,9502023-07-13 HIGH 7.8 CVE-2023-21256 In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code. This could le… Android Patch available Fix from $1,9502023-07-13 HIGH 7.8 CVE-2023-21257 In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission … Android Patch available Fix from $1,9502023-07-13 HIGH 7.8 CVE-2023-21399 there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no… Android Mitigation only Fix from $1,9502023-07-13 HIGH 7.5 CVE-2023-35694 In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remo… Android Mitigation only Fix from $1,9502023-07-13 HIGH 7.2 CVE-2023-35691 there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges ne… Android No fix yet Fix from $1,9502023-07-13 MEDIUM 6.7 CVE-2023-35693 In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege w… Android Patch available Fix from $1,6002023-07-13