Browse CVEs

HIGH 8.8 CVE-2022-3450 Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3446 Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3448 Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI ge… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3445 Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 106.0.5249.119+ Fix from $1,9502022-11-09 CRITICAL 9.6 CVE-2022-3890 Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer proce… Chrome 107.0.5304.106+ Fix from $2,3002022-11-09 HIGH 8.8 CVE-2022-3886 Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 107.0.5304.106+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3887 Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 107.0.5304.106+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3888 Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 107.0.5304.106+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3889 Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 107.0.5304.106+ Fix from $1,9502022-11-09 HIGH 8.8 CVE-2022-3885 Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 107.0.5304.106+ Fix from $1,9502022-11-09 HIGH 7.8 CVE-2022-20441 In navigateUpTo of Task.java, there is a possible way to launch an unexported intent handler due to a logic error in the code. This could lead to loc… Android Mitigation only Fix from $1,9502022-11-08 HIGH 7.8 CVE-2022-20450 In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way to bypass user consent due to a missing permission check. Thi… Android Mitigation only Fix from $1,9502022-11-08 HIGH 7.8 CVE-2022-20451 In onCallRedirectionComplete of CallsManager.java, there is a possible permissions bypass due to a missing permission check. This could lead to local… Android Mitigation only Fix from $1,9502022-11-08 HIGH 7.8 CVE-2022-20452 In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to lo… Android Mitigation only Fix from $1,9502022-11-08 HIGH 7.8 CVE-2022-20462 In phNxpNciHal_write_unlocked of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local esca… Android Mitigation only Fix from $1,9502022-11-08 HIGH 7.5 CVE-2022-20445 In process_service_search_rsp of sdp_discovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote… Android Mitigation only Fix from $1,9502022-11-08 MEDIUM 6.7 CVE-2022-20454 In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with S… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.5 CVE-2022-20447 In PAN_WriteBuf of pan_api.cc, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure over … Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 5.5 CVE-2022-20414 In setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could lead to loc… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 5.5 CVE-2022-20426 In multiple functions of many files, there is a possible obstruction of the user's ability to select a phone account due to resource exhaustion. This… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 5.5 CVE-2022-20448 In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass. This could… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 5.5 CVE-2022-20453 In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local deni… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 5.5 CVE-2022-20457 In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This … Android Mitigation only Fix from $1,6002022-11-08 HIGH 7.8 CVE-2021-1050 In MMU_UnmapPages of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… Android No fix yet Fix from $1,9502022-11-08 HIGH 7.8 CVE-2021-39661 In _PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could … Android Mitigation only Fix from $1,9502022-11-08 MEDIUM 6.8 CVE-2022-32617 In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, f… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.8 CVE-2022-32618 In typec, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege, f… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32615 In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32616 In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32614 In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileg… Android Mitigation only Fix from $1,6002022-11-08