Browse CVEs

MEDIUM 6.7 CVE-2022-26457 In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002022-09-06 MEDIUM 6.4 CVE-2022-26450 In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privile… Android Mitigation only Fix from $1,6002022-09-06 CRITICAL 9.8 CVE-2021-39815 The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the p… Android Mitigation only Fix from $2,3002022-08-24 CRITICAL 9.8 CVE-2022-20122 The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue using the p… Android Mitigation only Fix from $2,3002022-08-24 HIGH 7.5 CVE-2021-0891 An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersions: Androi… Android Mitigation only Fix from $1,9502022-08-24 HIGH 7.5 CVE-2021-0946 The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAddr, and… Android Mitigation only Fix from $1,9502022-08-24 HIGH 7.5 CVE-2021-0947 The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKM, and the… Android Mitigation only Fix from $1,9502022-08-24 MEDIUM 5.5 CVE-2021-0698 In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information di… Android Mitigation only Fix from $1,6002022-08-24 MEDIUM 5.5 CVE-2021-0887 In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information… Android Mitigation only Fix from $1,6002022-08-24 HIGH 8.8 CVE-2022-2613 Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2614 Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2617 Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2620 Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific use… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2621 Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to pot… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2623 Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific use… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2624 Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interac… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 MEDIUM 6.5 CVE-2022-2615 Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted … Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-2616 Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a maliciou… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-2618 Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrict… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-2622 Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass do… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 CRITICAL 9.8 CVE-2022-2587 Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit … Chrome 102.0.5005.125+ Fix from $2,3002022-08-12 HIGH 8.8 CVE-2022-2603 Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2604 Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2606 Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Ent… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2607 Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2608 Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in spec… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-2609 Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in speci… Chrome 104.0.5112.79+ Fix from $1,9502022-08-12 MEDIUM 6.5 CVE-2022-2605 Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-2610 Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12 MEDIUM 6.5 CVE-2022-2612 Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer… Chrome 104.0.5112.79+ Fix from $1,6002022-08-12