Browse CVEs

MEDIUM 5.5 CVE-2021-0411 In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no addition… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0412 In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0413 In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 5.5 CVE-2021-0414 In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no addit… Android Mitigation only Fix from $1,6002021-10-25 HIGH 8.1 CVE-2021-0870EPSS 7% In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with n… Android Patch available Fix from $1,9502021-10-22 HIGH 7.8 CVE-2021-0652 In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe … Android Patch available Fix from $1,9502021-10-22 HIGH 7.8 CVE-2021-0705 In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to … Android Patch available Fix from $1,9502021-10-22 HIGH 7.8 CVE-2021-0708 In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local e… Android Patch available Fix from $1,9502021-10-22 MEDIUM 6.8 CVE-2021-0703 In SecondStageMain of init.cpp, there is a possible use after free due to incorrect shared_ptr usage. This could lead to local escalation of privileg… Android Patch available Fix from $1,6002021-10-22 MEDIUM 5.5 CVE-2021-0702 In RevertActiveSessions of apexd.cpp, there is a possible way to share the wrong file due to an unintentional MediaStore downgrade. This could lead t… Android Patch available Fix from $1,6002021-10-22 MEDIUM 5.5 CVE-2021-0706 In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This coul… Android Mitigation only Fix from $1,6002021-10-22 HIGH 7.8 CVE-2021-0483 In multiple methods of AAudioService, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege wi… Android Patch available Fix from $1,9502021-10-22 MEDIUM 5.5 CVE-2021-0643 In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due t… Android Mitigation only Fix from $1,6002021-10-22 MEDIUM 5.5 CVE-2021-0651 In loadLabel of PackageItemInfo.java, there is a possible way to DoS a device by having a long label in an app due to incorrect input validation. Thi… Android Mitigation only Fix from $1,6002021-10-22 HIGH 7.3 CVE-2021-0583 In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This coul… Android Mitigation only Fix from $1,9502021-10-11 CRITICAL 9.6 CVE-2021-37973 KEVEPSS 12% Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially pe… Chrome 94.0.4606.61+ Fix from $2,3002021-10-08 HIGH 8.8 CVE-2021-37970 Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37972 Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37974 Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potential… Chrome 94.0.4606.71+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37975 KEVEPSS 35% Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 94.0.4606.71+ Fix from $1,9502021-10-08 HIGH 7.8 CVE-2021-37969 Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 MEDIUM 6.5 CVE-2021-37976 KEVEPSS 20% Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information f… Chrome 94.0.4606.71+ Fix from $1,6002021-10-08 HIGH 8.8 CVE-2021-37956 Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37957 Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37959 Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures … Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37961 Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 HIGH 8.8 CVE-2021-37962 Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to po… Chrome 94.0.4606.54+ Fix from $1,9502021-10-08 MEDIUM 5.4 CVE-2021-37958 Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into… Chrome 94.0.4606.54+ Fix from $1,6002021-10-08 CRITICAL 9.6 CVE-2021-30633 KEVEPSS 33% Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 93.0.4577.82+ Fix from $2,3002021-10-08 HIGH 8.8 CVE-2021-30625EPSS 10% Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website… Chrome 93.0.4577.82+ Fix from $1,9502021-10-08