Browse CVEs

MEDIUM 5.5 CVE-2024-43083 In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local den… Android Patch available Fix from $1,6002024-11-13 MEDIUM 5.5 CVE-2024-43084 In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure … Android Patch available Fix from $1,6002024-11-13 MEDIUM 5.5 CVE-2024-43086 In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused… Android Patch available Fix from $1,6002024-11-13 MEDIUM 5.0 CVE-2024-43090 In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure w… Android No fix yet Fix from $1,6002024-11-13 HIGH 7.8 CVE-2024-23715 In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of priv… Android Mitigation only Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-31337 In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalati… Android Mitigation only Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-34719 In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no a… Android Patch available Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-34729 In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privileg… Android Mitigation only Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-34747 In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation… Android Mitigation only Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-40660 In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This c… Android Patch available Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-40661 In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due to a missing permission chec… Android Patch available Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-40671 In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This … Android Mitigation only Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-43080 In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local esc… Android Patch available Fix from $1,9502024-11-13 HIGH 7.8 CVE-2024-43081 In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This c… Android Patch available Fix from $1,9502024-11-13 MEDIUM 5.5 CVE-2024-43082 In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy. This could lead to local inf… Android Patch available Fix from $1,6002024-11-13 HIGH 7.8 CVE-2023-35659 In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to loc… Android Mitigation only Fix from $1,9502024-11-13 HIGH 7.8 CVE-2023-35686 In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalati… Android Mitigation only Fix from $1,9502024-11-13 HIGH 8.8 CVE-2024-11112 Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 131.0.6778.69+ Fix from $1,9502024-11-12 HIGH 8.8 CVE-2024-11113 Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potenti… Chrome 131.0.6778.69+ Fix from $1,9502024-11-12 HIGH 8.8 CVE-2024-11115 Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalatio… Chrome 131.0.6778.69+ Fix from $1,9502024-11-12 HIGH 8.3 CVE-2024-11114 Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer p… Chrome 131.0.6778.69+ Fix from $1,9502024-11-12 MEDIUM 6.5 CVE-2024-11110 Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted C… Chrome 131.0.6778.69+ Fix from $1,6002024-11-12 HIGH 7.5 CVE-2024-10668 There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability l… Quick Share 1.0.2002.2+ Fix from $1,9502024-11-07 HIGH 8.8 CVE-2024-10827 Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Chrome 130.0.6723.116+ Fix from $1,9502024-11-06 HIGH 8.8 CVE-2024-10826 Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corrup… Chrome 130.0.6723.116+ Fix from $1,9502024-11-06 HIGH 7.5 CVE-2024-10389 There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Writ… Safearchive 2024-10-25+ Fix from $1,9502024-11-04 MEDIUM 6.7 CVE-2024-20118 In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20119 In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20120 In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002024-11-04 MEDIUM 6.7 CVE-2024-20121 In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002024-11-04