cve.bz

google vulnerabilities, newest first, page 137

Filter
  1. 8.8CVE-2023-21108EPSS 0.2%

    In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed…

  2. 5.5CVE-2023-21105EPSS 0.1%

    In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not need…

  3. 7.0CVE-2023-21101EPSS 0.07%

    In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for explo…

  4. 4.7CVE-2023-21095EPSS 0.06%

    In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User inte…

  5. 9.8CVE-2021-0945EPSS 0.3%

    In _PMRCreate of the PowerVR kernel driver, a missing bounds check means it is possible to overwrite heap memory via PhysmemNewRamBackedPMR. This could lead to local escalation of privilege with no additional execution privileges needed. U…

  6. 9.8CVE-2021-0701EPSS 0.3%

    In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional e…

  7. 7.1CVE-2023-2976EPSS 0.2%

    Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the defau…

  8. 8.8CVE-2023-3217EPSS 13%

    Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  9. 8.8CVE-2023-3216EPSS 0.9%

    Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  10. 8.8CVE-2023-3215EPSS 14%

    Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  11. 8.8CVE-2023-3214EPSS 0.9%

    Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

  12. 6.7CVE-2023-20752EPSS 0.09%

    In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  13. 6.7CVE-2023-20751EPSS 0.09%

    In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  14. 4.1CVE-2023-20750EPSS 0.07%

    In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780926; Iss…

  15. 6.7CVE-2023-20749EPSS 0.09%

    In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS077809…

  16. 4.4CVE-2023-20747EPSS 0.09%

    In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519103; Issue ID: ALP…

  17. 6.7CVE-2023-20746EPSS 0.07%

    In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Iss…

  18. 6.7CVE-2023-20745EPSS 0.07%

    In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Iss…

  19. 6.7CVE-2023-20744EPSS 0.10%

    In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Issue ID: A…

  20. 6.7CVE-2023-20743EPSS 0.07%

    In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Iss…

  21. 4.4CVE-2023-20742EPSS 0.09%

    In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628591;…

  22. 4.4CVE-2023-20741EPSS 0.09%

    In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628591;…

  23. 6.7CVE-2023-20740EPSS 0.10%

    In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID…

  24. 6.7CVE-2023-20739EPSS 0.10%

    In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559819; Issue ID…

  25. 6.7CVE-2023-20738EPSS 0.10%

    In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0764514…

  26. 6.7CVE-2023-20737EPSS 0.07%

    In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID…

  27. 6.4CVE-2023-20736EPSS 0.07%

    In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Iss…

  28. 6.7CVE-2023-20735EPSS 0.10%

    In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0764514…

  29. 6.7CVE-2023-20734EPSS 0.10%

    In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0764514…

  30. 6.7CVE-2023-20733EPSS 0.07%

    In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID…

  31. 6.7CVE-2023-20732EPSS 0.10%

    In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573480…

  32. 4.4CVE-2023-20731EPSS 0.09%

    In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573495…

  33. 4.4CVE-2023-20730EPSS 0.09%

    In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573552…

  34. 4.4CVE-2023-20729EPSS 0.09%

    In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573552…

  35. 4.4CVE-2023-20728EPSS 0.09%

    In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573603…

  36. 6.7CVE-2023-20725EPSS 0.09%

    In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0…

  37. 6.7CVE-2023-20724EPSS 0.09%

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  38. 6.7CVE-2023-20723EPSS 0.09%

    In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07…

  39. 6.7CVE-2023-20716EPSS 0.09%

    In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS077968…

  40. 6.7CVE-2023-20715EPSS 0.09%

    In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS077969…

  41. 6.7CVE-2023-20712EPSS 0.09%

    In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS077969…

  42. 4.4CVE-2023-20727EPSS 0.09%

    In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588531…

  43. 5.5CVE-2023-30915EPSS 0.08%

    In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  44. 5.5CVE-2023-30914EPSS 0.08%

    In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  45. 5.5CVE-2023-30866EPSS 0.08%

    In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  46. 5.5CVE-2023-30865EPSS 0.08%

    In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  47. 7.8CVE-2023-30864EPSS 0.09%

    In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  48. 7.8CVE-2023-30863EPSS 0.09%

    In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  49. 5.5CVE-2022-48448EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  50. 5.5CVE-2022-48447EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.