Browse CVEs

HIGH 7.8 CVE-2025-2713 Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allo… Gvisor 20240325.0+ Fix from $1,9502025-03-28 HIGH 8.3 CVE-2025-2783 KEVEPSS 8% Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perfo… Chrome 134.0.6998.177+ Fix from $1,9502025-03-26 HIGH 8.8 CVE-2025-2476 Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 134.0.6998.117+ Fix from $1,9502025-03-19 HIGH 8.8 CVE-2025-1920 Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 134.0.6998.88+ Fix from $1,9502025-03-10 HIGH 8.8 CVE-2025-2135EPSS 7% Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 134.0.6998.88+ Fix from $1,9502025-03-10 HIGH 8.8 CVE-2025-2136 Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 134.0.6998.88+ Fix from $1,9502025-03-10 HIGH 8.8 CVE-2025-2137 Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML … Chrome 134.0.6998.88+ Fix from $1,9502025-03-10 HIGH 7.8 CVE-2024-56192 In wl_notify_gscan_event of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation … Android Mitigation only Fix from $1,9502025-03-10 HIGH 8.4 CVE-2024-56191 In dhd_process_full_gscan_result of dhd_pno.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege w… Android Mitigation only Fix from $1,9502025-03-10 MEDIUM 6.6 CVE-2024-56187 In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to loc… Android Mitigation only Fix from $1,6002025-03-10 MEDIUM 5.1 CVE-2024-56185 In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This… Android Mitigation only Fix from $1,6002025-03-10 MEDIUM 5.1 CVE-2024-56186 In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local informati… Android Mitigation only Fix from $1,6002025-03-10 MEDIUM 5.1 CVE-2024-56188 there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution priv… Android No fix yet Fix from $1,6002025-03-10 MEDIUM 5.1 CVE-2024-56184 In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information… Android Mitigation only Fix from $1,6002025-03-10 MEDIUM 6.8 CVE-2025-1121 Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access… Chrome Os Mitigation only Fix from $1,6002025-03-07 HIGH 8.8 CVE-2025-1916 Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to poten… Chrome 134.0.6998.35+ Fix from $1,9502025-03-05 HIGH 8.8 CVE-2025-1918 Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via… Chrome 134.0.6998.35+ Fix from $1,9502025-03-05 HIGH 8.8 CVE-2025-1919 Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via … Chrome 134.0.6998.35+ Fix from $1,9502025-03-05 HIGH 8.1 CVE-2025-1915 Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who co… Chrome 134.0.6998.35+ Fix from $1,9502025-03-05 MEDIUM 6.5 CVE-2025-1921 Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripher… Chrome 134.0.6998.35+ Fix from $1,6002025-03-05 HIGH 8.8 CVE-2025-1914 Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML … Chrome 134.0.6998.35+ Fix from $1,9502025-03-05 MEDIUM 6.5 CVE-2025-20653 In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physica… Android Mitigation only Fix from $1,6002025-03-03 HIGH 7.8 CVE-2025-20645 In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious… Android Mitigation only Fix from $1,9502025-03-03 MEDIUM 5.5 CVE-2025-20648 In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional exec… Android Mitigation only Fix from $1,6002025-03-03 HIGH 8.4 CVE-2024-39441 In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileg… Android Mitigation only Fix from $1,9502025-02-26 HIGH 8.8 CVE-2025-1006 Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web… Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 HIGH 8.8 CVE-2025-1426 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via … Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 HIGH 8.8 CVE-2025-0999 Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 HIGH 8.8 CVE-2025-0995 Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 133.0.69943.98+ Fix from $1,9502025-02-15 HIGH 8.1 CVE-2025-0997 Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted C… Chrome 133.0.6943.98+ Fix from $1,9502025-02-15