Browse CVEs

MEDIUM 6.4 CVE-2022-32612 In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.4 CVE-2022-32613 In vcu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32611 In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.4 CVE-2022-32609 In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.4 CVE-2022-32610 In vcu, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32603 In gpu drm, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32605 In isp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-32607 In aee, there is a possible use after free due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.4 CVE-2022-32608 In jpeg, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privilege… Android Mitigation only Fix from $1,6002022-11-08 HIGH 7.8 CVE-2022-32601 In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation of privilege with no additio… Android Mitigation only Fix from $1,9502022-11-08 MEDIUM 5.5 CVE-2022-32602 In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addition… Android Mitigation only Fix from $1,6002022-11-08 MEDIUM 6.7 CVE-2022-21778 In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System exe… Android Mitigation only Fix from $1,6002022-11-08 HIGH 8.8 CVE-2022-3658 Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to inst… Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3659 Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in spec… Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3723 KEVEPSS 8% Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 107.0.5304.87+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3652 Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3653 Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3654EPSS 24% Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3655 Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious exten… Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3656 Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via … Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3657 Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to pot… Chrome 107.0.5304.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3307 Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 106.0.5249.62+ Fix from $1,9502022-11-01 HIGH 8.8 CVE-2022-3315 Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 106.0.5249.62+ Fix from $1,9502022-11-01 HIGH 7.4 CVE-2022-3308 Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox… Chrome 106.0.5249.62+ Fix from $1,9502022-11-01 MEDIUM 6.5 CVE-2022-3309 Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific … Chrome 106.0.5249.62+ Fix from $1,6002022-11-01 MEDIUM 6.5 CVE-2022-3310 Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to insta… Chrome 106.0.5249.62+ Fix from $1,6002022-11-01 MEDIUM 6.5 CVE-2022-3311 Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform… Chrome 106.0.5249.62+ Fix from $1,6002022-11-01 MEDIUM 6.5 CVE-2022-3313 Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. … Chrome 106.0.5249.62+ Fix from $1,6002022-11-01 MEDIUM 6.5 CVE-2022-3314 Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perfor… Chrome 106.0.5249.62+ Fix from $1,6002022-11-01 HIGH 8.8 CVE-2022-3305 Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 106.0.5249.62+ Fix from $1,9502022-11-01