Browse CVEs

HIGH 7.8 CVE-2023-21123 In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for tracing due to a missing p… Android Mitigation only Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21124 In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege… Android Patch available Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21126 In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under SysUI due to Unsafe Intent. Th… Android Patch available Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21128 In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a logic error in the code. This co… Android Patch available Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21129 In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while the app is in the background… Android Mitigation only Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21131 In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitigations due to a logic error i… Android Patch available Fix from $1,9502023-06-15 HIGH 7.8 CVE-2023-21135 In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This … Android Patch available Fix from $1,9502023-06-15 HIGH 7.0 CVE-2023-21101 In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502023-06-15 MEDIUM 5.5 CVE-2023-21105 In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local informati… Android Patch available Fix from $1,6002023-06-15 HIGH 7.1 CVE-2023-2976 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Andr… Guava 32.0.0+ Fix from $1,9502023-06-14 HIGH 8.8 CVE-2023-3214 Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-3215EPSS 14% Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-3216 Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 HIGH 8.8 CVE-2023-3217EPSS 13% Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 114.0.5735.133+ Fix from $1,9502023-06-13 MEDIUM 6.7 CVE-2023-20749 In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20751 In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20752 In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20739 In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20723 In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 6.7 CVE-2023-20724 In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2023-30915 In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Android Mitigation only Fix from $1,6002023-06-06 HIGH 7.8 CVE-2023-30863 In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution … Android Mitigation only Fix from $1,9502023-06-06 HIGH 7.8 CVE-2023-30864 In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution … Android Mitigation only Fix from $1,9502023-06-06 MEDIUM 5.5 CVE-2022-48447 In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privilege… Android No fix yet Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2022-48448 In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privilege… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2023-30865 In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges neede… Android No fix yet Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2023-30866 In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges ne… Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2023-30914 In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Android No fix yet Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2022-48440 In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Android Mitigation only Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2022-48441 In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Android No fix yet Fix from $1,6002023-06-06