Browse CVEs

HIGH 8.8 CVE-2022-3039 Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-3040 Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 105.0.5195.52+ Fix from $1,9502022-09-26 MEDIUM 6.5 CVE-2022-2856 KEV Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily br… Chrome 104.0.5112.101 / 104.0.5112.102+ Fix from $1,6002022-09-26 MEDIUM 6.5 CVE-2022-2860 Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions vi… Chrome 104.0.5112.101+ Fix from $1,6002022-09-26 MEDIUM 6.5 CVE-2022-2861 Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicio… Chrome 104.0.5112.101+ Fix from $1,6002022-09-26 HIGH 8.8 CVE-2022-2852 Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 8.8 CVE-2022-2853 Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer proc… Chrome 104.0.5112.101+ Fix from $1,9502022-09-26 HIGH 7.5 CVE-2022-36011 TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes,… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36012 TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes,… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36013 TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to convert NodeDefs without an o… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36014 TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36015 TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `int64_t`, it crashes. We have p… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36016 TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36017 TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`, `requested_output_min`, `requested_out… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36027 TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the convert… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35991 TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive an `element_shape` of a rank g… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35992 TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a rank greater than one, it gi… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35993 TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1D tensor, it gives a `CHECK` … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35994 TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it gives a `CHECK` fails that c… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35995 TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with more than one element, it give… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35996 TensorFlow is an open source platform for machine learning. If `Conv2D` is given empty `input` and the `filter` and `padding` sizes are valid, the ou… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35997 TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is not a scalar, it gives a `CHEC… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35998 TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with more than one dimension, it g… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35999 TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inputs (e.g. `[3, 1, 0, 1]`), th… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36000 TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes,… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36001 TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is not of dtype `float`, it gives… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36002 TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `CHECK` fail that can trigger … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36003 TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36004 TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates, it gives a `CHECK` fail that… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36005 TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient` receives input `min` or `max… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16