Browse CVEs

MEDIUM 5.5 CVE-2019-9464 In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicati… Android Patch available Fix from $1,6002019-12-06 HIGH 8.8 CVE-2019-2225 When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be ab… Android Patch available Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2221 In hasActivityInVisibleTask of WindowProcessController.java there’s a possible bypass of user interaction requirements due to incorrect handling of t… Android Patch available Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2222 n ihevcd_parse_slice_data of ihevcd_parse_slice.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote c… Android Mitigation only Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2223 In ihevcd_ref_list of ihevcd_ref_list.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502019-12-06 HIGH 7.5 CVE-2019-2230 In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to … Android Patch available Fix from $1,9502019-12-06 HIGH 7.5 CVE-2019-2232 In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service wh… Android Patch available Fix from $1,9502019-12-06 MEDIUM 6.5 CVE-2019-2227 In DeepCopy of btif_av.cc, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure over Blue… Android Patch available Fix from $1,6002019-12-06 MEDIUM 5.5 CVE-2019-2220 In checkOperation of AppOpsService.java, there is a possible bypass of user interaction requirements due to mishandling application suspend. This cou… Android Mitigation only Fix from $1,6002019-12-06 MEDIUM 5.5 CVE-2019-2226 In device_class_to_int of device_class.cc, there is a possible out of bounds read due to improper casting. This could lead to local information discl… Android Mitigation only Fix from $1,6002019-12-06 MEDIUM 5.5 CVE-2019-2228 In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in… Android Mitigation only Fix from $1,6002019-12-06 MEDIUM 5.5 CVE-2019-2229 In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local informa… Android Patch available Fix from $1,6002019-12-06 HIGH 7.8 CVE-2019-2217 In setCpuVulkanInUse of GpuStats.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege w… Android Mitigation only Fix from $1,9502019-12-06 HIGH 7.8 CVE-2019-2218 In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could… Android Mitigation only Fix from $1,9502019-12-06 MEDIUM 6.5 CVE-2019-5825 KEVEPSS 56% Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a craft… Chrome 73.0.3683.86+ Fix from $1,6002019-11-25 MEDIUM 6.5 CVE-2019-5826 Use after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who had compromised the renderer process to potentially … Chrome 73.0.3683.86+ Fix from $1,6002019-11-25 HIGH 8.8 CVE-2019-5871 Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5874 Insufficient filtering in URI schemes in Google Chrome on Windows prior to 77.0.3865.75 allowed a remote attacker to bypass navigation restrictions v… Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5876 Use after free in media in Google Chrome on Android prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5877 Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via… Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5878 Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 HIGH 8.1 CVE-2019-5881 Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive information from p… Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 HIGH 7.4 CVE-2019-5880 Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTM… Chrome 77.0.3865.75+ Fix from $1,9502019-11-25 MEDIUM 6.5 CVE-2019-5872 Use after free in Mojo in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 77.0.3865.75+ Fix from $1,6002019-11-25 MEDIUM 6.5 CVE-2019-5879 Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious … Chrome 77.0.3865.75+ Fix from $1,6002019-11-25 CRITICAL 9.8 CVE-2019-5866 Out of bounds memory access in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 75.0.3770.142+ Fix from $2,3002019-11-25 CRITICAL 9.6 CVE-2019-5870 Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML p… Chrome 77.0.3865.75+ Fix from $2,3002019-11-25 HIGH 8.8 CVE-2019-5854 Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF … Chrome 76.0.3809.87+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5856 Insufficient policy enforcement in storage in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process … Chrome 76.0.3809.87+ Fix from $1,9502019-11-25 HIGH 8.8 CVE-2019-5858 Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code… Chrome 76.0.3809.87+ Fix from $1,9502019-11-25