Vulnetix
Try Vulnetix Request Demo
Google Security Advisories · February 2017 — Google Security Advisories
58 advisories 58 CVEs

GCVE / Google Cloud / Chrome / Android / Project Zero / OSS for 2017-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

How Vulnetix ranks risk Get a free API key

Advisories

CVE-2017-0411

Open SourceWeaponized exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to ...

CVEs:CVE-2017-0411

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0412

Open SourceWeaponized exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to ...

CVEs:CVE-2017-0412

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2016-8418

Open SourcePoC exploitHIGH2017-02-07

A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the contex...

CVEs:CVE-2016-8418

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

openSUSE-SU-2017:0565-1

Open SourcePoC exploitCRITICAL2017-02-18

Security update of chromium

Affected products

ProductStatusVendorPackageEcosystem
chromium affected SUSE:Package Hub 12 SP2 chromium —
Upstream advisory

CVE-2017-0406

Open SourcePoC exploitHIGH2017-02-07

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code executi...

CVEs:CVE-2017-0406

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0407

Open SourcePoC exploitHIGH2017-02-07

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code executi...

CVEs:CVE-2017-0407

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0405

Open SourcePoC exploitHIGH2017-02-07

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code exec...

CVEs:CVE-2017-0405

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0422

Open SourcePoC exploitHIGH2017-02-07

A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android....

CVEs:CVE-2017-0422

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0437

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0437

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8419

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2016-8419

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8420

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2016-8420

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8421

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2016-8421

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8476

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2016-8476

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8481

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2016-8481

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8480

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first...

CVEs:CVE-2016-8480

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0424

Open SourcePoC exploitMEDIUM2017-02-07

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it is a general bypass for a user level defen...

CVEs:CVE-2017-0424

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0435

Open SourcePoC exploitHIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0435

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2016-8414

Open SourcePoC exploitMEDIUM2017-02-07

An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires comp...

CVEs:CVE-2016-8414

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0413

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to g...

CVEs:CVE-2017-0413

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0420

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain a...

CVEs:CVE-2017-0420

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0426

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. ...

CVEs:CVE-2017-0426

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0451

Open SourcePoC exploitMEDIUM2017-02-07

An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process...

CVEs:CVE-2017-0451

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0421

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used ...

CVEs:CVE-2017-0421

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0425

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Pro...

CVEs:CVE-2017-0425

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0414

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to g...

CVEs:CVE-2017-0414

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0448

Open SourcePoC exploitHIGH2017-02-07

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explici...

CVEs:CVE-2017-0448

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2014-9914

Open SourcePoC exploitHIGH2017-02-07

Race condition in the ip4_datagram_release_cb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect expectations about locking durin...

CVEs:CVE-2014-9914

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0408

Open SourceEPSS <= 49%HIGH2017-02-07

A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in ...

CVEs:CVE-2017-0408

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0409

Open SourceEPSS <= 49%HIGH2017-02-07

A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execu...

CVEs:CVE-2017-0409

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0444

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged p...

CVEs:CVE-2017-0444

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0433

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compro...

CVEs:CVE-2017-0433

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0445

Open SourceEPSS <= 49%HIGH2017-02-06

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged...

CVEs:CVE-2017-0445

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0427

Open SourceEPSS <= 49%HIGH2017-02-06

An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device ...

CVEs:CVE-2017-0427

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0415

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevate...

CVEs:CVE-2017-0415

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0416

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevate...

CVEs:CVE-2017-0416

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0417

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevate...

CVEs:CVE-2017-0417

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0418

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevate...

CVEs:CVE-2017-0418

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0419

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevate...

CVEs:CVE-2017-0419

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0428

Open SourceEPSS <= 49%HIGH2017-02-06

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device c...

CVEs:CVE-2017-0428

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0429

Open SourceEPSS <= 49%HIGH2017-02-06

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device c...

CVEs:CVE-2017-0429

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0439

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0439

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0430

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent devi...

CVEs:CVE-2017-0430

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0450

Open SourceEPSS <= 49%HIGH2017-02-06

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it is mitigated by current platform configur...

CVEs:CVE-2017-0450

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-0441

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0441

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0443

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0443

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0434

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compro...

CVEs:CVE-2017-0434

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0436

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0436

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0438

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0438

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0440

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0440

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0442

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged ...

CVEs:CVE-2017-0442

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0446

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged...

CVEs:CVE-2017-0446

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0449

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privile...

CVEs:CVE-2017-0449

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0447

Open SourceEPSS <= 49%HIGH2017-02-06

An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged...

CVEs:CVE-2017-0447

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0410

Open SourceEPSS <= 49%HIGH2017-02-07

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to ...

CVEs:CVE-2017-0410

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2017-5027

GoogleEPSS <= 49%CRITICAL2017-02-17

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTM...

CVEs:CVE-2017-5027

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2017-0423

Open SourceEPSS <= 49%CRITICAL2017-02-07

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stac...

CVEs:CVE-2017-0423

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

CVE-2016-10044

Open SourceEPSS <= 49%HIGH2017-02-07

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup s...

CVEs:CVE-2016-10044

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
linux_kernel affected linux — —
Upstream advisory

CVE-2017-0431

Open SourceEPSS <= 49%CRITICAL2017-02-07

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899.

CVEs:CVE-2017-0431

Affected products

ProductStatusVendorPackageEcosystem
android affected google — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console