Browse CVEs

MEDIUM 6.7 CVE-2021-0361 In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0362 In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution … Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0363 In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0364 In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0353 In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution … Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0354 In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution pr… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0355 In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution p… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0356 In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0357 In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 6.7 CVE-2021-0358 In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System exec… Android Mitigation only Fix from $1,6002021-02-03 MEDIUM 5.5 CVE-2020-27097 In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible permissions bypass. This could lead to local information disclosure w… Android Mitigation only Fix from $1,6002021-01-26 MEDIUM 5.5 CVE-2020-27098 In checkGrantUriPermission of UriGrantsManagerService.java, there is a possible way to access contacts due to a permissions bypass. This could lead t… Android Mitigation only Fix from $1,6002021-01-26 HIGH 7.5 CVE-2020-0236 In A2DP_GetCodecType of a2dp_codec_config, there is a possible out-of-bounds read due to improper input validation. This could lead to remote informa… Android Mitigation only Fix from $1,9502021-01-26 MEDIUM 6.5 CVE-2020-8567 Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who… Secret Manager Provider For Secret Store Csi Driver 0.0.6 / 0.0.10+ Fix from $1,6002021-01-21 CRITICAL 9.6 CVE-2020-16045 Use after Free in Payments in Google Chrome on Android prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to po… Chrome 87.0.4280.66+ Fix from $2,3002021-01-14 HIGH 8.8 CVE-2020-6572 KEVEPSS 11% Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chrome 81.0.4044.92+ Fix from $1,9502021-01-14 MEDIUM 6.1 CVE-2020-16046 Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chrome 84.0.4147.105+ Fix from $1,6002021-01-14 CRITICAL 9.8 CVE-2021-0316 In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code exe… Android Patch available Fix from $2,3002021-01-11 HIGH 7.8 CVE-2021-0306 In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an a… Android Mitigation only Fix from $1,9502021-01-11 HIGH 7.8 CVE-2021-0307 In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. T… Android Mitigation only Fix from $1,9502021-01-11 HIGH 7.8 CVE-2021-0310 In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalati… Android Mitigation only Fix from $1,9502021-01-11 HIGH 7.8 CVE-2021-0317 In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalat… Android Patch available Fix from $1,9502021-01-11 HIGH 7.8 CVE-2021-0318 In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local … Android Mitigation only Fix from $1,9502021-01-11 HIGH 7.5 CVE-2021-0313 In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remo… Android Patch available Fix from $1,9502021-01-11 HIGH 7.3 CVE-2021-0315 In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a ta… Android Patch available Fix from $1,9502021-01-11 HIGH 7.3 CVE-2021-0319 In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without approp… Android Patch available Fix from $1,9502021-01-11 MEDIUM 6.5 CVE-2021-0311 In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could l… Android Mitigation only Fix from $1,6002021-01-11 MEDIUM 6.5 CVE-2021-0312 In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information dis… Android Mitigation only Fix from $1,6002021-01-11 MEDIUM 5.5 CVE-2021-0304 In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local informa… Android Mitigation only Fix from $1,6002021-01-11 MEDIUM 5.5 CVE-2021-0309 In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access wit… Android Mitigation only Fix from $1,6002021-01-11