Google

The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_sup

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof se

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass n

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised th

Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacke

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypa

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap cor

Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of

In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds ch

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to en

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a diff

In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when rest

In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overf

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This c

In multiple locations, there is a possible out of bounds read due to a missing bounds check. This could lead to paired d

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to

In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This c

In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error

In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injectio

In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on s

In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to

In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BA

In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead

In multiple locations, there is a possible way to request access to directories that should be hidden due to improper in

In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input

In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check. T

In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic

In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in

In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local informatio

In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local

In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission ch

In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to loc

In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of syst

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This coul

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions

In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local

In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due

In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing pe

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This

In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.

there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege

Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap co