cve.bz

google vulnerabilities, newest first, page 138

Filter
  1. 5.5CVE-2022-48446EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  2. 5.5CVE-2022-48445EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  3. 5.5CVE-2022-48444EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  4. 5.5CVE-2022-48443EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  5. 5.5CVE-2022-48442EPSS 0.07%

    In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  6. 5.5CVE-2022-48441EPSS 0.07%

    In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  7. 5.5CVE-2022-48440EPSS 0.07%

    In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  8. 4.4CVE-2022-48439EPSS 0.09%

    In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  9. 4.4CVE-2022-48438EPSS 0.08%

    In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  10. 7.8CVE-2022-48392EPSS 0.08%

    In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  11. 5.5CVE-2022-48391EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  12. 7.8CVE-2022-48390EPSS 0.08%

    In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.

  13. 8.8CVE-2023-3079KEVEPSS 38%

    Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  14. 4.3CVE-2023-2941EPSS 0.6%

    Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium secu…

  15. 6.5CVE-2023-2940EPSS 0.7%

    Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security seve…

  16. 7.8CVE-2023-2939EPSS 0.5%

    Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. (Chromium security severity: Medium)

  17. 4.3CVE-2023-2938EPSS 0.9%

    Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium…

  18. 4.3CVE-2023-2937EPSS 0.9%

    Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium…

  19. 8.8CVE-2023-2936EPSS 23%

    Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  20. 8.8CVE-2023-2935EPSS 24%

    Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  21. 8.8CVE-2023-2934EPSS 1.5%

    Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  22. 8.8CVE-2023-2933EPSS 0.9%

    Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

  23. 8.8CVE-2023-2932EPSS 1.0%

    Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

  24. 8.8CVE-2023-2931EPSS 0.9%

    Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

  25. 8.8CVE-2023-2930EPSS 0.8%

    Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Hig…

  26. 8.8CVE-2023-2929EPSS 1.1%

    Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  27. 8.8CVE-2023-2726EPSS 0.7%

    Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity:…

  28. 8.8CVE-2023-2725EPSS 25%

    Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Hi…

  29. 8.8CVE-2023-2724EPSS 29%

    Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  30. 8.8CVE-2023-2723EPSS 15%

    Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  31. 8.8CVE-2023-2722EPSS 0.9%

    Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  32. 8.8CVE-2023-2721EPSS 0.9%

    Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

  33. 5.5CVE-2023-21118EPSS 0.2%

    In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exp…

  34. 7.8CVE-2023-21117EPSS 0.08%

    In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to register a broadcast receiver due to a permissions bypass. This could lead to local escalation of privilege with no additional…

  35. 6.7CVE-2023-21116EPSS 0.09%

    In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System executio…

  36. 5.5CVE-2023-21112EPSS 0.09%

    In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for …

  37. 5.5CVE-2023-21111EPSS 0.09%

    In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This could lead to local denial of service with no additional execution privileges nee…

  38. 7.8CVE-2023-21110EPSS 0.09%

    In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …

  39. 7.8CVE-2023-21109EPSS 0.1%

    In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User inter…

  40. 7.8CVE-2023-21107EPSS 0.09%

    In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not nee…

  41. 7.8CVE-2023-21106EPSS 0.1%

    In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati…

  42. 5.5CVE-2023-21104EPSS 0.08%

    In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions…

  43. 5.5CVE-2023-21103EPSS 0.10%

    In registerPhoneAccount of PhoneAccountRegistrar.java, uncaught exceptions in parsing persisted user data could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for e…

  44. 7.8CVE-2023-21102EPSS 0.2%

    In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User inte…

  45. 5.5CVE-2023-20930EPSS 0.08%

    In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interact…

  46. 5.5CVE-2023-20914EPSS 0.06%

    In onSetRuntimePermissionGrantStateByDeviceAdmin of AdminRestrictedPermissionsUtils.java, there is a possible way for the work profile to read SMS messages due to a permissions bypass. This could lead to local information disclosure with U…

  47. 3.3CVE-2023-20726EPSS 0.08%

    In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  48. 6.7CVE-2023-20722EPSS 0.09%

    In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0777…

  49. 6.7CVE-2023-20721EPSS 0.09%

    In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0716…

  50. 6.7CVE-2023-20720EPSS 0.10%

    In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS…