Browse CVEs

HIGH 8.8 CVE-2022-4440 Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 8.8 CVE-2022-4436 Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 108.0.5359.124+ Fix from $1,9502022-12-14 HIGH 7.8 CVE-2022-20611 In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. Th… Android Patch available Fix from $1,9502022-12-13 HIGH 7.3 CVE-2022-20501 In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tap… Android Patch available Fix from $1,9502022-12-13 MEDIUM 5.5 CVE-2022-20500 In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service wi… Android Patch available Fix from $1,6002022-12-13 MEDIUM 5.5 CVE-2022-20502 In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclos… Android Patch available Fix from $1,6002022-12-13 CRITICAL 9.8 CVE-2022-20473EPSS 9% In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code exec… Android Patch available Fix from $2,3002022-12-13 HIGH 7.8 CVE-2022-20474 In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead… Android Patch available Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20475 In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This… Android Patch available Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20477 In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in … Android Patch available Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20478 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20479 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20480 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20484 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20485 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20486 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20487 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20488 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20491 In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This coul… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20495 In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in … Android Patch available Fix from $1,9502022-12-13 HIGH 7.5 CVE-2022-20483 In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. … Android Mitigation only Fix from $1,9502022-12-13 MEDIUM 5.5 CVE-2022-20476 In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This … Android Patch available Fix from $1,6002022-12-13 MEDIUM 5.5 CVE-2022-20482 In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and require factory reset due to resour… Android Mitigation only Fix from $1,6002022-12-13 MEDIUM 5.5 CVE-2022-20496 In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local info… Android Patch available Fix from $1,6002022-12-13 CRITICAL 9.8 CVE-2022-20472EPSS 7% In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code exec… Android Patch available Fix from $2,3002022-12-13 HIGH 8.8 CVE-2022-20411 In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution ove… Android Mitigation only Fix from $1,9502022-12-13 HIGH 8.8 CVE-2022-20469 In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation … Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.8 CVE-2022-20470 In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation… Android Mitigation only Fix from $1,9502022-12-13 HIGH 7.3 CVE-2022-20442 In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a tapjackin… Android Mitigation only Fix from $1,9502022-12-13 MEDIUM 6.5 CVE-2022-20468 In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… Android Mitigation only Fix from $1,6002022-12-13