Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Total 210374 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-0734 1 Google 1 Android 2022-08-12 N/A 5.5 MEDIUM
In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure of an installed package, without proper query permissions, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-189122911
CVE-2022-34235 3 Adobe, Apple, Microsoft 3 Premiere Elements, Macos, Windows 2022-08-12 N/A 7.8 HIGH
Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user interaction.
CVE-2022-20408 1 Google 1 Android 2022-08-12 N/A 7.5 HIGH
Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A
CVE-2022-20382 1 Google 1 Android 2022-08-12 N/A 6.7 MEDIUM
In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-214245176References: Upstream kernel
CVE-2022-20381 1 Google 1 Android 2022-08-12 N/A 9.8 CRITICAL
Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A
CVE-2022-20380 1 Google 1 Android 2022-08-12 N/A 7.5 HIGH
Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A
CVE-2022-20379 1 Google 1 Android 2022-08-12 N/A 6.7 MEDIUM
In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-209436980References: N/A
CVE-2022-20378 1 Google 1 Android 2022-08-12 N/A 9.8 CRITICAL
Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A
CVE-2022-20377 1 Google 1 Android 2022-08-12 N/A 6.7 MEDIUM
In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222339795References: N/A
CVE-2022-20376 1 Google 1 Android 2022-08-12 N/A 6.7 MEDIUM
In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216130110References: N/A
CVE-2022-20375 1 Google 1 Android 2022-08-12 N/A 7.5 HIGH
In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-180956894References: N/A
CVE-2022-20373 1 Google 1 Android 2022-08-12 N/A 6.4 MEDIUM
In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-208269510References: N/A
CVE-2022-20372 1 Google 1 Android 2022-08-12 N/A 6.7 MEDIUM
In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-195480799References: N/A
CVE-2022-20384 1 Google 1 Android 2022-08-12 N/A 9.8 CRITICAL
Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A
CVE-2022-20383 1 Google 1 Android 2022-08-12 N/A 7.8 HIGH
In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222408847References: N/A
CVE-2022-20407 1 Google 1 Android 2022-08-12 N/A 7.5 HIGH
Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A
CVE-2022-20400 1 Google 1 Android 2022-08-12 N/A 9.8 CRITICAL
In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-225178325References: N/A
CVE-2022-20406 1 Google 1 Android 2022-08-12 N/A 7.5 HIGH
Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A
CVE-2022-20403 1 Google 1 Android 2022-08-12 N/A 9.8 CRITICAL
Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A
CVE-2022-20402 1 Google 1 Android 2022-08-12 N/A 9.8 CRITICAL
Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A