Browse CVEs

MEDIUM 6.7 CVE-2021-0904 In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 6.5 CVE-2021-0650 In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote informa… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-0653 In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission ch… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.5 CVE-2021-0704 In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from t… Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 5.0 CVE-2021-0919 In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service … Android Mitigation only Fix from $1,6002021-12-15 MEDIUM 6.5 CVE-2021-22565 An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to genera… Exposure Notification Verification Server 1.1.2+ Fix from $1,6002021-12-09 HIGH 7.8 CVE-2021-25517 An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution. Android Mitigation only Fix from $1,9502021-12-08 HIGH 7.5 CVE-2021-25516 An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations. Android Mitigation only Fix from $1,9502021-12-08 MEDIUM 6.7 CVE-2021-25518 An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution. Android Mitigation only Fix from $1,6002021-12-08 MEDIUM 6.5 CVE-2021-25514 An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information. Android Mitigation only Fix from $1,6002021-12-08 HIGH 7.8 CVE-2021-25510 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution. Android Mitigation only Fix from $1,9502021-12-08 HIGH 7.8 CVE-2021-25511 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal… Android Mitigation only Fix from $1,9502021-12-08 HIGH 7.8 CVE-2021-25512 An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities. Android Mitigation only Fix from $1,9502021-12-08 CRITICAL 9.6 CVE-2021-38002 Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafte… Chrome 95.0.4638.69+ Fix from $2,3002021-11-23 HIGH 8.8 CVE-2021-37997 Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially ex… Chrome 95.0.4638.69+ Fix from $1,9502021-11-23 HIGH 8.8 CVE-2021-37998 Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 95.0.4638.69+ Fix from $1,9502021-11-23 HIGH 8.8 CVE-2021-38001EPSS 27% Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 95.0.4638.69+ Fix from $1,9502021-11-23 HIGH 8.8 CVE-2021-38003 KEVEPSS 39% Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 95.0.4638.69+ Fix from $1,9502021-11-23 MEDIUM 6.1 CVE-2021-37999 Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in … Chrome 95.0.4638.69+ Fix from $1,6002021-11-23 MEDIUM 6.1 CVE-2021-38000 KEV Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily brow… Chrome 95.0.4638.69+ Fix from $1,6002021-11-23 MEDIUM 6.7 CVE-2021-0668 In apusys, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0669 In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0670 In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution priv… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0671 In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 5.5 CVE-2021-0672 In Browser app, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0629 In mdlactl driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0655 In mdlactl driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with Syst… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0656 In edma driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0657 In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System… Android Mitigation only Fix from $1,6002021-11-18 MEDIUM 6.7 CVE-2021-0658 In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-11-18