Google

A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7

A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Ve

A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1

A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-6

In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical acces

In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to loc

A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID:

In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remo

In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote t

In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL termi

In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples va

A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.

In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an uns

Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt m

Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially explo

An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other pro

A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out

Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit he

Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap co

A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap

Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit hea

Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject

Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to e

Inappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker in a privi

A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap c

Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfor

Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote att

Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windo

Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform d

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof t

Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote att

Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may caus

NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may caus

Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to g

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while ca

An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-3

In libMtkOmxVdec.so there is a possible heap buffer overflow. This could lead to a remote elevation of privilege enablin

An information disclosure vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Andro

An elevation of privilege vulnerability in the Upstream kernel wifi driver. Product: Android. Versions: Android kernel.

An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Androi

A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: A