Browse CVEs

MEDIUM 6.5 CVE-2021-21134EPSS 5% Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML pa… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21135EPSS 19% Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a craf… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21136 Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via … Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21137EPSS 6% Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21139 Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 MEDIUM 6.5 CVE-2021-21141EPSS 5% Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy v… Chrome 88.0.705.74 / 88.0.4324.96+ Fix from $1,6002021-02-09 CRITICAL 9.6 CVE-2021-21121EPSS 6% Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a cra… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $2,3002021-02-09 CRITICAL 9.6 CVE-2021-21124EPSS 8% Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a s… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $2,3002021-02-09 HIGH 8.8 CVE-2021-21118EPSS 17% Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory acces… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21119EPSS 7% Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially expl… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21120EPSS 7% Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.8 CVE-2021-21122EPSS 7% Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 8.1 CVE-2021-21125EPSS 8% Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem r… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,9502021-02-09 HIGH 7.8 CVE-2021-21117 Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalatio… Chrome 88.0.4324.96+ Fix from $1,9502021-02-09 MEDIUM 6.5 CVE-2021-21123EPSS 10% Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions vi… Chrome 88.0.705.50 / 88.0.4324.96+ Fix from $1,6002021-02-09 HIGH 8.8 CVE-2020-16044 Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP p… Chrome 88.0.4324.96+ Fix from $1,9502021-02-09 MEDIUM 5.5 CVE-2020-11836 OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enf… Android Mitigation only Fix from $1,6002021-02-06 HIGH 7.5 CVE-2021-0351 In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,9502021-02-04 MEDIUM 6.7 CVE-2021-0343 In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002021-02-04 MEDIUM 6.7 CVE-2021-0344 In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-02-04 MEDIUM 6.7 CVE-2021-0345 In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,6002021-02-04 MEDIUM 6.7 CVE-2021-0346 In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-02-04 MEDIUM 6.7 CVE-2021-0348 In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002021-02-04 MEDIUM 6.7 CVE-2021-0349 In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-02-04 CRITICAL 9.8 CVE-2021-26687 An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default … Android Mitigation only Fix from $2,3002021-02-04 CRITICAL 9.8 CVE-2021-26688 An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SM… Android No fix yet Fix from $2,3002021-02-04 CRITICAL 9.8 CVE-2021-26689 An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LV… Android Mitigation only Fix from $2,3002021-02-04 MEDIUM 6.7 CVE-2021-0365 In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0359 In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0360 In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002021-02-03