Browse CVEs

HIGH 7.4 CVE-2019-2213 In binder_free_transaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege … Android Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.8 CVE-2019-2233 In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escal… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2209 In BTA_DmPinReply of bta_dm_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information dis… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2212 In poisson_distribution of random, there is an out of bounds read. This could lead to local information disclosure with no additional execution privi… Android Mitigation only Fix from $1,6002019-11-13 CRITICAL 9.8 CVE-2019-2036 In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2019-2204 In FindSharedFunctionInfo of objects.cc, there is a possible out of bounds read due to a mistake in AST traversal. This could lead to remote code exe… Android Mitigation only Fix from $2,3002019-11-13 CRITICAL 9.8 CVE-2019-2205 In ProxyResolverV8::SetPacScript of proxy_resolver_v8.cc, there is a possible memory corruption due to a use after free. This could lead to remote co… Android Mitigation only Fix from $2,3002019-11-13 HIGH 8.8 CVE-2019-2206 In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execut… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2192 In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privil… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2193 In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lea… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2195 In tokenize of sqlite3_android.cpp, there is a possible attacker controlled INSERT statement due to improper input validation. This could lead to loc… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2202 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalat… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2203 In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalat… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.8 CVE-2019-2207 In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. This could lead to local esc… Android Mitigation only Fix from $1,9502019-11-13 HIGH 7.5 CVE-2019-2208 In PromiseBuiltinsAssembler::NewPromiseCapability of builtins-promise.cc, there is a possible out of bounds read in v8 JIT code due to a bug in code … Android Mitigation only Fix from $1,9502019-11-13 MEDIUM 6.7 CVE-2019-2199 In createSessionInternal of PackageInstallerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2196 In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2197 In processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass due to an insecure default value. This could lead to l… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 5.5 CVE-2019-2198 In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution p… Android Mitigation only Fix from $1,6002019-11-13 MEDIUM 6.5 CVE-2011-1802 WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (… Blink Mitigation only Fix from $1,6002019-11-12 MEDIUM 6.5 CVE-2011-1803 An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying t… Blink Mitigation only Fix from $1,6002019-11-12 MEDIUM 6.5 CVE-2011-2334 Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections. Blink Mitigation only Fix from $1,6002019-11-12 HIGH 7.5 CVE-2011-2335 A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. Blink Mitigation only Fix from $1,9502019-11-12 CRITICAL 9.8 CVE-2011-2337 A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. Blink Mitigation only Fix from $2,3002019-11-07 MEDIUM 6.5 CVE-2011-2336 An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation … Blink Mitigation only Fix from $1,6002019-11-07 MEDIUM 6.5 CVE-2011-2353 Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function. Blink Mitigation only Fix from $1,6002019-11-07 MEDIUM 6.5 CVE-2011-2807 Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13. Blink No fix yet Fix from $1,6002019-11-07 MEDIUM 6.5 CVE-2011-2808 A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed. Blink Mitigation only Fix from $1,6002019-11-06 HIGH 7.5 CVE-2011-1298 An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function. Blink Patch available Fix from $1,9502019-11-06 CRITICAL 9.8 CVE-2011-1460 WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks. Blink Patch available Fix from $2,3002019-11-05