Browse CVEs

HIGH 7.8 CVE-2021-0427 In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local esc… Android Patch available Fix from $1,9502021-04-13 HIGH 7.8 CVE-2021-0429 In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no add… Android Patch available Fix from $1,9502021-04-13 HIGH 7.5 CVE-2021-0431 In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclos… Android Patch available Fix from $1,9502021-04-13 HIGH 7.0 CVE-2021-0432 In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This … Android Patch available Fix from $1,9502021-04-13 MEDIUM 5.5 CVE-2021-0400 In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency se… Android Patch available Fix from $1,6002021-04-13 MEDIUM 5.5 CVE-2021-0428 In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could … Android Patch available Fix from $1,6002021-04-13 HIGH 8.8 CVE-2021-21194 Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21195 Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21196 Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption … Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21197 Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-21199 Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 HIGH 7.4 CVE-2021-21198 Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially p… Chrome 89.0.4389.114+ Fix from $1,9502021-04-09 CRITICAL 9.8 CVE-2021-25360 An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on … Android Mitigation only Fix from $2,3002021-04-09 HIGH 8.8 CVE-2021-25356 An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary a… Android No fix yet Fix from $1,9502021-04-09 HIGH 8.8 CVE-2021-25361 An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of … Android Mitigation only Fix from $1,9502021-04-09 HIGH 7.8 CVE-2021-25365 An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd. Android Mitigation only Fix from $1,9502021-04-09 MEDIUM 6.1 CVE-2021-25362 An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files. Android Mitigation only Fix from $1,6002021-04-09 MEDIUM 6.1 CVE-2021-25363 An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete … Android Mitigation only Fix from $1,6002021-04-09 MEDIUM 5.5 CVE-2021-25357 A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), an… Android Mitigation only Fix from $1,6002021-04-09 HIGH 7.1 CVE-2021-30162 An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control o… Android Mitigation only Fix from $1,9502021-04-06 MEDIUM 5.5 CVE-2021-30161 An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming … Android Mitigation only Fix from $1,6002021-04-06 HIGH 8.8 CVE-2021-22538 A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker wh… Exposure Notifications Verification Server 0.23.1+ Fix from $1,9502021-03-31 HIGH 8.8 CVE-2021-21192 Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 89.0.4389.90+ Fix from $1,9502021-03-16 HIGH 8.8 CVE-2021-21193 KEVEPSS 10% Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 89.0.4389.90+ Fix from $1,9502021-03-16 HIGH 8.8 CVE-2021-21191 Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 89.0.4389.90+ Fix from $1,9502021-03-16 HIGH 7.8 CVE-2021-0464 In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio… Android Mitigation only Fix from $1,9502021-03-10 HIGH 7.8 CVE-2021-0465 In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502021-03-10 MEDIUM 6.7 CVE-2021-0454 In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,6002021-03-10 MEDIUM 6.7 CVE-2021-0455 In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,6002021-03-10 MEDIUM 6.7 CVE-2021-0456 In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… Android Mitigation only Fix from $1,6002021-03-10