openSUSE-SU-2021:1632-1
Open SourceExploitedCISA KEV listedCRITICAL2021-12-28
Security update for chromium
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Leap 15.2 | chromium | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 6 are already weaponised in the wild.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Leap 15.2 | chromium | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Leap 15.3 | chromium | — |
| chromium | affected | SUSE:Package Hub 15 SP3 | chromium | — |
Updated chromium-browser-stable packages fix security vulnerabilities
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:8 | chromium-browser-stable | — |
CVEs:CVE-2021-4102
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4102
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4102
ASB-A-195082750
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
Updated thrift/golang-github-apache-thrift packages fix security vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-apache-thrift | affected | Mageia:8 | golang-github-apache-thrift | — |
| thrift | affected | Mageia:8 | thrift | — |
Updated golang packages fix security vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Mageia:8 | golang | — |
Updated golang packages fix security vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Mageia:8 | golang | — |
Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| go-toolset-1.16 | affected | Red Hat:devtools:2021 | go-toolset-1.16 | — |
| go-toolset-1.16-build | affected | Red Hat:devtools:2021 | go-toolset-1.16-build | — |
| go-toolset-1.16-golang | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang | — |
| go-toolset-1.16-golang-bin | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang-bin | — |
| go-toolset-1.16-golang-docs | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang-docs | — |
| go-toolset-1.16-golang-misc | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang-misc | — |
| go-toolset-1.16-golang-race | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang-race | — |
| go-toolset-1.16-golang-src | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang-src | — |
| go-toolset-1.16-golang-tests | affected | Red Hat:devtools:2021 | go-toolset-1.16-golang-tests | — |
| go-toolset-1.16-runtime | affected | Red Hat:devtools:2021 | go-toolset-1.16-runtime | — |
| go-toolset-1.16-scldevel | affected | Red Hat:devtools:2021 | go-toolset-1.16-scldevel | — |
Important: go-toolset:rhel8 security and bug fix update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| delve | affected | AlmaLinux:8 | delve | — |
| golang | affected | AlmaLinux:8 | golang | — |
| golang-bin | affected | AlmaLinux:8 | golang-bin | — |
| golang-docs | affected | AlmaLinux:8 | golang-docs | — |
| golang-misc | affected | AlmaLinux:8 | golang-misc | — |
| golang-race | affected | AlmaLinux:8 | golang-race | — |
| golang-src | affected | AlmaLinux:8 | golang-src | — |
| golang-tests | affected | AlmaLinux:8 | golang-tests | — |
| go-toolset | affected | AlmaLinux:8 | go-toolset | — |
Important: go-toolset:rhel8 security and bug fix update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| delve | affected | Rocky Linux:8 | delve | — |
| golang | affected | Rocky Linux:8 | golang | — |
| go-toolset | affected | Rocky Linux:8 | go-toolset | — |
golang.org/x/net/http2 allows uncontrolled memory consumption
CVEs:CVE-2021-44716
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| x/net/http2 | affected | golang.org | golang.org/x/net/http2 | — |
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVEs:CVE-2021-44716
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cloud_insights_telegraf | affected | netapp | — | — |
| debian_linux | affected | debian | — | — |
| go | affected | golang | — | — |
Excessive Platform Resource Consumption within a Loop in Kubernetes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| go-yaml/yaml | affected | github.com | github.com/go-yaml/yaml | — |
| yaml.v2 | affected | gopkg.in | gopkg.in/yaml.v2 | — |
Excessive Platform Resource Consumption within a Loop in Kubernetes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| go-yaml/yaml | affected | github.com | github.com/go-yaml/yaml | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| yaml.v2 | affected | gopkg.in | gopkg.in/yaml.v2 | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP3 | chromium | — |
| chromium | affected | openSUSE:Leap 15.3 | chromium | — |
Fix CVE(s): CVE-2021-3426
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| idle-python3.5 | affected | TuxCare:Ubuntu:16.04 | idle-python3.5 | — |
| libpython3.5 | affected | TuxCare:Ubuntu:16.04 | libpython3.5 | — |
| libpython3.5-dev | affected | TuxCare:Ubuntu:16.04 | libpython3.5-dev | — |
| libpython3.5-minimal | affected | TuxCare:Ubuntu:16.04 | libpython3.5-minimal | — |
| libpython3.5-stdlib | affected | TuxCare:Ubuntu:16.04 | libpython3.5-stdlib | — |
| libpython3.5-testsuite | affected | TuxCare:Ubuntu:16.04 | libpython3.5-testsuite | — |
| python3.5 | affected | TuxCare:Ubuntu:16.04 | python3.5 | — |
| python3.5-dev | affected | TuxCare:Ubuntu:16.04 | python3.5-dev | — |
| python3.5-doc | affected | TuxCare:Ubuntu:16.04 | python3.5-doc | — |
| python3.5-examples | affected | TuxCare:Ubuntu:16.04 | python3.5-examples | — |
| python3.5-minimal | affected | TuxCare:Ubuntu:16.04 | python3.5-minimal | — |
| python3.5-venv | affected | TuxCare:Ubuntu:16.04 | python3.5-venv | — |
DEBIAN-CVE-2021-38008
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
PUB-A-190228658
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
DEBIAN-CVE-2021-38013
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38005
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38006
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38012
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38007
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38010
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38022
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38014
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38009
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38019
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
DEBIAN-CVE-2021-38011
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38016
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38017
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38021
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38018
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
DEBIAN-CVE-2021-38020
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-38015
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
PUB-A-188883590
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVer...
CVEs:CVE-2021-0954
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0954
CVEs:CVE-2021-0963
In onCreate of KeyChainActivity.java, there is a possible way to use an app certificate stored in keychain due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interac...
CVEs:CVE-2021-0963
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-190011721
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
DEBIAN-CVE-2021-4057
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Updated chromium-browser-stable packages fix security vulnerability
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:8 | chromium-browser-stable | — |
Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4057
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4057
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.
CVEs:CVE-2021-44717
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| debian_linux | affected | debian | — | — |
| go | affected | golang | — | — |
CVEs:CVE-2021-44717
DEBIAN-CVE-2021-4062
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2021-4062
Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4062
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
DEBIAN-CVE-2021-4056
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-4061
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2021-4056
Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4056
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4061
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4061
DEBIAN-CVE-2021-4058
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4058
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4058
DEBIAN-CVE-2021-4063
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4063
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4063
DEBIAN-CVE-2021-4068
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVEs:CVE-2021-4068
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4068
DEBIAN-CVE-2021-4064
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2021-4064
Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4064
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
DEBIAN-CVE-2021-4066
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4066
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4066
DEBIAN-CVE-2021-4059
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVEs:CVE-2021-4059
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4059
DEBIAN-CVE-2021-4065
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-4067
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2021-4053
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4053
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4053
CVEs:CVE-2021-4065
Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4065
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4067
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4067
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-0956
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interacti...
CVEs:CVE-2021-0956
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
DEBIAN-CVE-2021-4054
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVEs:CVE-2021-4054
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4054
DEBIAN-CVE-2021-4055
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVEs:CVE-2021-4055
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2021-4055
Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4101
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2021-4101
CVEs:CVE-2021-0967
In vorbis_book_decodev_set of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitatio...
CVEs:CVE-2021-0967
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
DEBIAN-CVE-2021-4078
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4078
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
CVEs:CVE-2021-4078
DEBIAN-CVE-2021-4052
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2021-4052
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVEs:CVE-2021-4052
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impe...
CVEs:CVE-2021-22568
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dart_software_development_kit | affected | dart | — | — |
CVEs:CVE-2021-0964
In C2SoftMP3::process() of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploita...
CVEs:CVE-2021-0964
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-193363621
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| frameworks/av | affected | platform | platform/frameworks/av | — |
| hardware/google/av | affected | platform | platform/hardware/google/av | — |
CVEs:CVE-2021-24935
The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Refl...
CVEs:CVE-2021-24935
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| wp_google_fonts | affected | wp_google_fonts_project | — | — |
DEBIAN-CVE-2021-4079
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets.
CVEs:CVE-2021-4079
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
CVEs:CVE-2021-4079
CVEs:CVE-2021-1002
In WT_Interpolate of eas_wtengine.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation....
CVEs:CVE-2021-1002
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4099
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2021-4099
Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2021-4100
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2021-4100
In btif_in_hf_client_generic_evt of btif_hf_client.cc, there is a possible Bluetooth service crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed f...
CVEs:CVE-2021-1022
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1022
In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A...
CVEs:CVE-2021-0673
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0673
In osi_malloc and osi_calloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.P...
CVEs:CVE-2021-0968
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0968
CVEs:CVE-2021-0971
In MPEG4Source::read of MPEG4Extractor.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitat...
CVEs:CVE-2021-0971
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In toBARK of floor0.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVe...
CVEs:CVE-2021-0976
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0976
Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVEs:CVE-2021-4098
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2021-4098
Integer overflow in the bundled Brotli C library
CVEs:CVE-2020-36846
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| brotli | affected | PyPI | brotli | — |
| compu-brotli-sys | affected | crates.io | compu-brotli-sys | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.linux-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-arm | — |
| Microsoft.NETCore.App.Runtime.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.linux-musl-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm | — |
| Microsoft.NETCore.App.Runtime.linux-musl-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | — |
| Microsoft.NETCore.App.Runtime.linux-musl-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-x64 | — |
| Microsoft.NETCore.App.Runtime.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.win-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.win-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.win-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.win-x86 | — |
| Microsoft.NETCore.App.Runtime.osx-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.osx-arm64 | — |
| Microsoft.NETCore.App.Runtime.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.win-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.win-arm | — |
| Microsoft.NETCore.App.Runtime.win-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | — |
| Microsoft.NETCore.App.Runtime.win-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.win-x64 | — |
| Microsoft.NETCore.App.Runtime.win-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.win-x86 | — |
A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library. Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length o...
CVEs:CVE-2020-36846
PYSEC-2020-29
CVEs:CVE-2020-36846
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| brotli | affected | PyPI | brotli | — |
| compu-brotli-sys | affected | crates.io | compu-brotli-sys | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.linux-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-arm | — |
| Microsoft.NETCore.App.Runtime.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.linux-musl-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm | — |
| Microsoft.NETCore.App.Runtime.linux-musl-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-arm64 | — |
| Microsoft.NETCore.App.Runtime.linux-musl-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-musl-x64 | — |
| Microsoft.NETCore.App.Runtime.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 | — |
| Microsoft.NETCore.App.Runtime.Mono.win-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.win-x64 | — |
| Microsoft.NETCore.App.Runtime.Mono.win-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.Mono.win-x86 | — |
| Microsoft.NETCore.App.Runtime.osx-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.osx-arm64 | — |
| Microsoft.NETCore.App.Runtime.osx-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.osx-x64 | — |
| Microsoft.NETCore.App.Runtime.win-arm | affected | NuGet | Microsoft.NETCore.App.Runtime.win-arm | — |
| Microsoft.NETCore.App.Runtime.win-arm64 | affected | NuGet | Microsoft.NETCore.App.Runtime.win-arm64 | — |
| Microsoft.NETCore.App.Runtime.win-x64 | affected | NuGet | Microsoft.NETCore.App.Runtime.win-x64 | — |
| Microsoft.NETCore.App.Runtime.win-x86 | affected | NuGet | Microsoft.NETCore.App.Runtime.win-x86 | — |
In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal Wi-Fi AP provides invalid information with no additional execution privileges needed. User i...
CVEs:CVE-2021-0969
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0969
CVEs:CVE-2021-0993
In getOffsetBeforeAfter of TextLine.java, there is a possible denial of service due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVEs:CVE-2021-0993
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
CVEs:CVE-2021-39645
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39645
PUB-A-199805112
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2021-0675
In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0...
CVEs:CVE-2021-0675
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-201895896
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remo...
CVEs:CVE-2021-4273
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| studygolang | affected | studygolang | — | — |
CVEs:CVE-2021-4273
In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS060...
CVEs:CVE-2021-0674
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0674
Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A
CVEs:CVE-2021-39641
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39641
CVEs:CVE-2021-39644
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
CVEs:CVE-2021-39644
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A
CVEs:CVE-2021-39655
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39655
PUB-A-126949257
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-192641593
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-199809304
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A
CVEs:CVE-2021-39646
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39646
PUB-A-201537251
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
ASB-A-196448784
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
CVEs:CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.
CVEs:CVE-2021-25516
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-25514
An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.
CVEs:CVE-2021-25514
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed f...
CVEs:CVE-2021-39636
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39636
PUB-A-120612905
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
CVEs:CVE-2021-0965
In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera...
CVEs:CVE-2021-0965
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exp...
CVEs:CVE-2021-0970
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0970
In nfaHciCallback of HciEventManager.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure over NFC with System execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2021-0996
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0996
PUB-A-160822094
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
CVEs:CVE-2021-0991
In OnMetadataChangedListener of AdvancedBluetoothDetailsHeaderController.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges neede...
CVEs:CVE-2021-0991
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio...
CVEs:CVE-2021-39657
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39657
ASB-A-199190644
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel:Qualcomm | affected | Android | :linux_kernel:Qualcomm | — |
PUB-A-194696049
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
In quota_proc_write of xt_quota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Produc...
CVEs:CVE-2021-0961
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0961
ASB-A-190402578
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel:Qualcomm | affected | Android | :linux_kernel:Qualcomm | — |
ASB-A-196046570
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
PUB-A-190408641
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel:Qualcomm | affected | Android | :linux_kernel:Qualcomm | — |
In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional execution privileges needed. User interaction is needed ...
CVEs:CVE-2021-0952
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0952
CVEs:CVE-2021-0904
In SRAMROM, there is a possible permission bypass due to an insecure permission setting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06076938; ...
CVEs:CVE-2021-0904
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-201779035
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2021-1039
In NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitati...
CVEs:CVE-2021-1039
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0973
In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interactio...
CVEs:CVE-2021-0973
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0984
In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e...
CVEs:CVE-2021-0984
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0704
In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclos...
CVEs:CVE-2021-0704
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1044
In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interact...
CVEs:CVE-2021-1044
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39639
In TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check. This could lead to local escalation of privilege with physical access to device internals with no additional execution privileges needed. User interactio...
CVEs:CVE-2021-39639
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-198291476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2021-39652
In sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product...
CVEs:CVE-2021-39652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-194499021
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed f...
CVEs:CVE-2021-0769
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0769
CVEs:CVE-2021-1047
In valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.P...
CVEs:CVE-2021-1047
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-197966306
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In snoozeNotification of NotificationListenerService.java, there is a possible permission confusion due to a misleading user consent dialog. This could lead to local escalation of privilege with User execution privileges needed. User interaction is nee...
CVEs:CVE-2021-1019
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1019
CVEs:CVE-2021-1020
In snoozeNotification of NotificationListenerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. U...
CVEs:CVE-2021-1020
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In snoozeNotificationInt of NotificationManagerService.java, there is a possible way to disable notification for an arbitrary user due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed....
CVEs:CVE-2021-1021
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1021
CVEs:CVE-2021-39656
In __configfs_open_file of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Produ...
CVEs:CVE-2021-39656
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In AdapterService and GattService definition of AndroidManifest.xml, there is a possible way to disable bluetooth connection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges nee...
CVEs:CVE-2021-1017
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1017
PUB-A-174049066
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel: | affected | Android | :linux_kernel: | — |
In lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2021-1046
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1046
CVEs:CVE-2021-39637
In CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed...
CVEs:CVE-2021-39637
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of defense-in-depth due to missing validation of the return value. This could lead to local escalation of privilege with System execution privileges needed. User in...
CVEs:CVE-2021-39643
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39643
CVEs:CVE-2021-39653
In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of privilege after preparing the device, hiding the warning, and passing the phone to a new user, wi...
CVEs:CVE-2021-39653
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-193579873
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-195573629
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-195609074
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.P...
CVEs:CVE-2021-39638
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39638
CVEs:CVE-2021-39650
In (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...
CVEs:CVE-2021-39650
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-169763055
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-195607566
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In onCreate of RequestIgnoreBatteryOptimizations.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no addi...
CVEs:CVE-2021-1023
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1023
CVEs:CVE-2021-0998
In 'ih264e_find_bskip_params()' of ih264e_me.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exp...
CVEs:CVE-2021-0998
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1001
In PVInitVideoEncoder of mp4enc_api.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...
CVEs:CVE-2021-1001
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0900
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ...
CVEs:CVE-2021-0900
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ...
CVEs:CVE-2021-0902
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0902
CVEs:CVE-2021-0676
In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS058630...
CVEs:CVE-2021-0676
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0677
In ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827154; Issue ID...
CVEs:CVE-2021-0677
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitat...
CVEs:CVE-2021-1040
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1040
CVEs:CVE-2021-25517
An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.
CVEs:CVE-2021-25517
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run a foreground service without showing a notification due to improper input validation. This could lead to local escalation of privilege with no additional ...
CVEs:CVE-2021-0981
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0981
CVEs:CVE-2021-1003
In adjustStreamVolume of AudioService.java, there is a possible way for unprivileged app to change audio stream volume due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User inter...
CVEs:CVE-2021-1003
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue I...
CVEs:CVE-2021-0678
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0678
CVEs:CVE-2021-0894
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue I...
CVEs:CVE-2021-0894
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue I...
CVEs:CVE-2021-0895
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0895
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue I...
CVEs:CVE-2021-0896
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0896
CVEs:CVE-2021-0903
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue I...
CVEs:CVE-2021-0903
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0679
In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID:...
CVEs:CVE-2021-0679
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS0...
CVEs:CVE-2021-0893
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0893
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS0...
CVEs:CVE-2021-0898
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0898
In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS0...
CVEs:CVE-2021-0899
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0899
In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID:...
CVEs:CVE-2021-0901
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0901
CVEs:CVE-2021-1029
In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2021-1029
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0977
In phNxpNHal_DtaUpdate of phNxpNciHal_dta.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2021-0977
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0992
In onCreate of PaymentDefaultDialog.java, there is a possible way to change a default payment app without user consent due to tapjack overlay. This could lead to local escalation of privilege with no additional execution privileges needed. User interac...
CVEs:CVE-2021-0992
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1007
In btu_hcif_process_event of btu_hcif.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation....
CVEs:CVE-2021-1007
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1024
In onEventReceived of EventResultPersister.java, there is a possible intent redirection due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....
CVEs:CVE-2021-1024
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1027
In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
CVEs:CVE-2021-1027
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1028
In setClientStateLocked of SurfaceFlinger.cpp, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2021-1028
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability.
CVEs:CVE-2021-25511
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-25511
CVEs:CVE-2021-1038
In UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: A...
CVEs:CVE-2021-1038
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.
CVEs:CVE-2021-25518
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-25518
CVEs:CVE-2021-25510
An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution.
CVEs:CVE-2021-25510
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In code generated by BuildParcelFields of generate_cpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder tra...
CVEs:CVE-2021-0966
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0966
CVEs:CVE-2021-0997
In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...
CVEs:CVE-2021-0997
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1005
In getDeviceIdWithFeature of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no ad...
CVEs:CVE-2021-1005
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In setApplicationCategoryHint of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with n...
CVEs:CVE-2021-1009
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1009
In onResume of NotificationAccessDetails.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional e...
CVEs:CVE-2021-1012
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1012
CVEs:CVE-2021-1013
In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead...
CVEs:CVE-2021-1013
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In getNetworkTypeForSubscriber of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with ...
CVEs:CVE-2021-1014
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1014
CVEs:CVE-2021-1016
In onCreate of UsbPermissionActivity.java, there is a possible way to grant an app access to USB without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. U...
CVEs:CVE-2021-1016
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1026
In startRanging of RttServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional executio...
CVEs:CVE-2021-1026
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In setNotificationsShownFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information discl...
CVEs:CVE-2021-1030
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1030
In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n...
CVEs:CVE-2021-39651
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39651
In getMeidForSlot of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional...
CVEs:CVE-2021-1015
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1015
In getLaunchedFromUid and getLaunchedFromPackage of ActivityClientController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local informa...
CVEs:CVE-2021-0988
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0988
CVEs:CVE-2021-0953
In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privilege...
CVEs:CVE-2021-0953
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible disclosure of information about installed device/profile owner package name due to side channel information disclosure. This could lead to local information disclosure ...
CVEs:CVE-2021-0983
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0983
In hasGrantedPolicy of DevicePolicyManagerService.java, there is a possible information disclosure about the device owner, profile owner, or device admin due to a logic error in the code. This could lead to local information disclosure with no addition...
CVEs:CVE-2021-0986
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0986
CVEs:CVE-2021-0987
In getNeighboringCellInfo of PhoneInterfaceManager.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no ad...
CVEs:CVE-2021-0987
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In hasManageOngoingCallsPermission of TelecomServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with...
CVEs:CVE-2021-0989
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0989
In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional e...
CVEs:CVE-2021-0990
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0990
CVEs:CVE-2021-0995
In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclos...
CVEs:CVE-2021-0995
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1018
In adjustStreamVolume of AudioService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional exec...
CVEs:CVE-2021-1018
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In cancelNotificationsFromListener of NotificationManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclos...
CVEs:CVE-2021-1031
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1031
In getMimeGroup of PackageManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional e...
CVEs:CVE-2021-1032
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1032
PUB-A-193438173
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2021-1006
In several functions of DatabaseManager.java, there is a possible leak of Bluetooth MAC addresses due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed...
CVEs:CVE-2021-1006
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine whether an app is installed, without querypermissions due to a missing permission check. This could lead to localinformation disclosure with no additional ex...
CVEs:CVE-2021-1034
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1034
In update of km_compat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Produ...
CVEs:CVE-2021-0958
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0958
In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is no...
CVEs:CVE-2021-1008
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1008
CVEs:CVE-2021-25513
An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen.
CVEs:CVE-2021-25513
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosur...
CVEs:CVE-2021-0979
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0979
CVEs:CVE-2021-1011
In setPackageStoppedState of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andro...
CVEs:CVE-2021-1011
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0978
In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with...
CVEs:CVE-2021-0978
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0982
In getOrganizationNameForUser of DevicePolicyManagerService.java, there is a possible organization name disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User i...
CVEs:CVE-2021-0982
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In onReceive of AlertReceiver.java, there is a possible way to dismiss system dialog due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ...
CVEs:CVE-2021-0985
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0985
CVEs:CVE-2021-0994
In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional...
CVEs:CVE-2021-0994
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges ne...
CVEs:CVE-2021-0999
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0999
CVEs:CVE-2021-1004
In getConfiguredNetworks of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local escalation of privilege with no additional execut...
CVEs:CVE-2021-1004
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1010
In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVers...
CVEs:CVE-2021-1010
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In hasNamedWallpaper of WallpaperManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional exe...
CVEs:CVE-2021-1025
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-1025
An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities.
CVEs:CVE-2021-25512
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-25512
In __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Produ...
CVEs:CVE-2021-39640
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39640
PUB-A-157294279
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2021-25515
An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID.
CVEs:CVE-2021-25515
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39647
In mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a possible reinitialization of TEE due to improper locking. This could lead to local information disclosure with System execution privileges needed. User interact...
CVEs:CVE-2021-39647
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System execution privileges needed. User interaction is not needed for exploitation.Product: And...
CVEs:CVE-2021-39649
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39649
PUB-A-174049006
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-198713939
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission.
CVEs:CVE-2021-25519
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-25519
In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue I...
CVEs:CVE-2021-0897
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-0897
CVEs:CVE-2021-0955
In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An...
CVEs:CVE-2021-0955
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitatio...
CVEs:CVE-2021-39642
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2021-39642
PUB-A-195731663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Authorization bypass in Openshift
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes-1.19 | affected | chainguard | kubernetes-1.19 | — |
| kubernetes-1.20 | affected | chainguard | kubernetes-1.20 | — |
| kubernetes-1.21 | affected | chainguard | kubernetes-1.21 | — |
| kubernetes-1.22 | affected | chainguard | kubernetes-1.22 | — |
| kubernetes-1.23 | affected | chainguard | kubernetes-1.23 | — |
| kubernetes-1.24 | affected | wolfi | kubernetes-1.24 | — |
| kubernetes-1.24 | affected | chainguard | kubernetes-1.24 | — |
| kubernetes-1.25 | affected | chainguard | kubernetes-1.25 | — |
| kubernetes-1.25 | affected | wolfi | kubernetes-1.25 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.30 | affected | wolfi | kubernetes-1.30 | — |
| kubernetes-1.30 | affected | chainguard | kubernetes-1.30 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.32 | affected | chainguard | kubernetes-1.32 | — |
| kubernetes-1.32 | affected | wolfi | kubernetes-1.32 | — |
| openshift/origin | affected | github.com | github.com/openshift/origin | — |
Authorization bypass in Openshift
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openshift/origin | affected | github.com | github.com/openshift/origin | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.