Browse CVEs

HIGH 8.1 CVE-2021-21205 Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictio… Chrome 90.0.4430.72+ Fix from $1,9502021-04-26 MEDIUM 6.5 CVE-2021-21208 Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain s… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21209 Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21210 Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a … Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21211 Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a cr… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21212 Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiF… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21215EPSS 34% Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML pag… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21216EPSS 22% Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML pag… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21221 Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer … Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 6.5 CVE-2021-21222 Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site i… Chrome 90.0.4430.85+ Fix from $1,6002021-04-26 MEDIUM 5.5 CVE-2021-21217 Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 5.5 CVE-2021-21218 Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 5.5 CVE-2021-21219 Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from proces… Chrome 90.0.4430.72+ Fix from $1,6002021-04-26 MEDIUM 5.5 CVE-2021-25382 An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secur… Android Mitigation only Fix from $1,6002021-04-23 HIGH 7.8 CVE-2021-22539 An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to l… Bazel 0.4.1+ Fix from $1,9502021-04-16 MEDIUM 6.7 CVE-2021-0488 In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege w… Android Patch available Fix from $1,6002021-04-15 HIGH 7.8 CVE-2021-0437 In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no … Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0438 In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect … Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0439 In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check.… Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0442 In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead… Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0445 In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502021-04-13 HIGH 7.5 CVE-2021-0435 In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information di… Android Patch available Fix from $1,9502021-04-13 HIGH 7.3 CVE-2021-0446 In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of pri… Android Patch available Fix from $1,9502021-04-13 MEDIUM 6.6 CVE-2021-0468 In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker… Android Mitigation only Fix from $1,6002021-04-13 MEDIUM 5.5 CVE-2021-0436 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information di… Android Patch available Fix from $1,6002021-04-13 MEDIUM 5.5 CVE-2021-0444 In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of con… Android Patch available Fix from $1,6002021-04-13 MEDIUM 5.5 CVE-2021-0471 In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosur… Android Patch available Fix from $1,6002021-04-13 CRITICAL 9.8 CVE-2021-0430 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio… Android Patch available Fix from $2,3002021-04-13 HIGH 8.0 CVE-2021-0433 In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay… Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0426 In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc… Android Patch available Fix from $1,9502021-04-13