Browse CVEs

HIGH 8.8 CVE-2021-30572 Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30573EPSS 6% Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30574 Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30575 Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30576 Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to poten… Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 7.8 CVE-2021-30577 Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation … Chrome 92.0.4515.107+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30541 Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30559 Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30560EPSS 21% Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 1.1.35 / 8.2.12+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30561 Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30562 Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30563 KEVEPSS 9% Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 HIGH 8.8 CVE-2021-30564 Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 91.0.4472.164+ Fix from $1,9502021-08-03 MEDIUM 5.5 CVE-2021-22552 An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is t… Asylo after 0.6.1 Fix from $1,6002021-08-02 CRITICAL 9.8 CVE-2021-0515 In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remot… Android Mitigation only Fix from $2,3002021-07-14 HIGH 8.8 CVE-2021-0592 In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution … Android Mitigation only Fix from $1,9502021-07-14 HIGH 8.1 CVE-2021-0514 In several functions of the V8 library, there is a possible use after free due to a race condition. This could lead to remote code execution in an un… Android Mitigation only Fix from $1,9502021-07-14 HIGH 8.0 CVE-2021-0594 In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote … Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2020-0417 In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to… Android Patch available Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0486 In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This could lead… Android Patch available Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0577 In flv extractor, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0586 In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overla… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0587 In StreamOut::prepareForWriting of StreamOut.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalatio… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0589 In BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0600 In onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a device admin app due to improper input validation. This c… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0602 In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for all configur… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.8 CVE-2021-0603 In onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts without permission due to a tapjacking/overlay attack… Android Patch available Fix from $1,9502021-07-14 HIGH 7.5 CVE-2021-0596 In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote i… Android Mitigation only Fix from $1,9502021-07-14 HIGH 7.3 CVE-2021-0441 In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege w… Android Patch available Fix from $1,9502021-07-14 MEDIUM 6.7 CVE-2021-0585 In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local… Android Mitigation only Fix from $1,6002021-07-14