Google

In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across us

In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitiali

In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overl

In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error i

In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code. This could lead to loca

In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use afte

In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after fr

In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of ser

In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This coul

Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap c

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allow

Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap

A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack.

Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerab

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. T

Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convi

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit

Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinc

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap cor

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit he

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access se

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key leng

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corr

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corr

Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap

Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap co

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote at

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of serv

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of serv

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the gara

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v

Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from runn

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker wh

Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass co

Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit hea

When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing