Browse CVEs

MEDIUM 5.4 CVE-2025-0996 Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the … Chrome 133.0.6943.98+ Fix from $1,6002025-02-15 CRITICAL 10.0 CVE-2025-0982 Sandbox escape in the JavaScript Task feature of Google Cloud Application Integration allows an actor to execute arbitrary unsandboxed code via craft… Application Integration after 2025-01-23 Fix from $2,3002025-02-06 MEDIUM 6.3 CVE-2025-0444 Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 133.0.6943.53+ Fix from $1,6002025-02-04 MEDIUM 6.3 CVE-2025-0451 Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in sp… Chrome 133.0.6943.53+ Fix from $1,6002025-02-04 MEDIUM 5.4 CVE-2025-0445 Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… Chrome 133.0.6943.53+ Fix from $1,6002025-02-04 MEDIUM 6.6 CVE-2025-20641 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Android Mitigation only Fix from $1,6002025-02-03 MEDIUM 6.6 CVE-2025-20642 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Android Mitigation only Fix from $1,6002025-02-03 MEDIUM 6.7 CVE-2025-20636 In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,6002025-02-03 MEDIUM 6.6 CVE-2025-20639 In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has ph… Android Mitigation only Fix from $1,6002025-02-03 MEDIUM 6.6 CVE-2024-20141 In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has… Android Mitigation only Fix from $1,6002025-02-03 MEDIUM 6.6 CVE-2024-20142 In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has… Android Mitigation only Fix from $1,6002025-02-03 MEDIUM 5.3 CVE-2024-10604 Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP so… Fuchsia Patch available Fix from $1,6002025-01-30 MEDIUM 5.3 CVE-2024-10026 A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-… Gvisor 20231030.0 / 20231204.0+ Fix from $1,6002025-01-30 MEDIUM 5.3 CVE-2024-10603 Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external atta… Gvisor 20231030.0+ Fix from $1,6002025-01-30 HIGH 8.8 CVE-2025-0762 Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Ch… Chrome 132.0.6834.159+ Fix from $1,9502025-01-29 HIGH 8.4 CVE-2024-40649 In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel wi… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40651 In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel wi… Android No fix yet Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40669 In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execut… Android No fix yet Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40670 In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execut… Android No fix yet Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40672 In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-40677 In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission … Android Mitigation only Fix from $1,9502025-01-28 HIGH 7.7 CVE-2024-40676 In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused… Android Mitigation only Fix from $1,9502025-01-28 HIGH 7.5 CVE-2024-40675 In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service wi… Android Mitigation only Fix from $1,9502025-01-28 MEDIUM 6.5 CVE-2024-40673 In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper inp… Android Mitigation only Fix from $1,6002025-01-28 MEDIUM 5.3 CVE-2024-40674 In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This… Android Mitigation only Fix from $1,6002025-01-28 HIGH 8.4 CVE-2024-34732 In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of pr… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-34733 In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escala… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.4 CVE-2024-34748 In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalat… Android Mitigation only Fix from $1,9502025-01-28 HIGH 8.8 CVE-2018-9373 In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escal… Android Mitigation only Fix from $1,9502025-01-28 MEDIUM 6.2 CVE-2018-9378 In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead… Android Patch available Fix from $1,6002025-01-28