cve.bz

google vulnerabilities, newest first, page 148

Filter
  1. 7.8CVE-2023-20940EPSS 0.06%

    In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

  2. 7.8CVE-2023-20939EPSS 0.07%

    In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is …

  3. 7.8CVE-2023-20938EPSS 0.3%

    In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…

  4. 7.8CVE-2023-20937EPSS 0.2%

    In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n…

  5. 7.8CVE-2023-20934EPSS 0.09%

    In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges …

  6. 7.8CVE-2023-20933EPSS 0.2%

    In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for …

  7. 3.3CVE-2023-20932EPSS 0.1%

    In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges ne…

  8. 6.7CVE-2022-20551EPSS 0.10%

    In createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User intera…

  9. 5.5CVE-2022-20481EPSS 0.1%

    In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploit…

  10. 5.5CVE-2022-20455EPSS 0.1%

    In addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not n…

  11. 8.8CVE-2023-0941EPSS 0.6%

    Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

  12. 8.8CVE-2023-0933EPSS 0.6%

    Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

  13. 8.8CVE-2023-0932EPSS 0.6%

    Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium s…

  14. 8.8CVE-2023-0931EPSS 0.6%

    Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  15. 8.8CVE-2023-0930EPSS 0.7%

    Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  16. 8.8CVE-2023-0929EPSS 0.6%

    Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  17. 8.8CVE-2023-0928EPSS 0.6%

    Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  18. 8.8CVE-2023-0927EPSS 0.6%

    Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security se…

  19. 5.5CVE-2023-20949EPSS 0.09%

    In s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not nee…

  20. 7.8CVE-2023-20927EPSS 0.09%

    In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…

  21. 5.5CVE-2022-47452EPSS 0.09%

    In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.

  22. 5.5CVE-2022-47451EPSS 0.2%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  23. 5.5CVE-2022-47450EPSS 0.09%

    In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.

  24. 5.5CVE-2022-47371EPSS 0.09%

    In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel.

  25. 5.5CVE-2022-47370EPSS 0.09%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  26. 5.5CVE-2022-47369EPSS 0.09%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  27. 5.5CVE-2022-47368EPSS 0.09%

    In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  28. 5.5CVE-2022-47367EPSS 0.09%

    In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  29. 5.5CVE-2022-47366EPSS 0.09%

    In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.

  30. 5.5CVE-2022-47365EPSS 0.09%

    In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.

  31. 5.5CVE-2022-47364EPSS 0.09%

    In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.

  32. 5.5CVE-2022-47363EPSS 0.09%

    In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services.

  33. 7.8CVE-2022-47361EPSS 0.10%

    In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.

  34. 5.5CVE-2022-47360EPSS 0.09%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  35. 5.5CVE-2022-47359EPSS 0.09%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  36. 5.5CVE-2022-47358EPSS 0.09%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  37. 5.5CVE-2022-47357EPSS 0.09%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  38. 5.5CVE-2022-47356EPSS 0.08%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  39. 5.5CVE-2022-47355EPSS 0.08%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  40. 5.5CVE-2022-47354EPSS 0.08%

    In log service, there is a missing permission check. This could lead to local denial of service in log service.

  41. 5.5CVE-2022-47348EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  42. 5.5CVE-2022-47347EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  43. 5.5CVE-2022-47346EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  44. 5.5CVE-2022-47345EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  45. 5.5CVE-2022-47344EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  46. 5.5CVE-2022-47343EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  47. 5.5CVE-2022-47342EPSS 0.09%

    In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.

  48. 6.7CVE-2022-47341EPSS 0.1%

    In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.

  49. 6.7CVE-2022-47339EPSS 0.3%

    In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.

  50. 5.5CVE-2022-47333EPSS 0.09%

    In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.