Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation.Check if you run itEPSS 0.11%Dec 8, 2025
- Medium5.5In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow.Check if you run itEPSS 0.11%Dec 8, 2025
- High7.3In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default.Check if you run itEPSS 0.13%Dec 8, 2025
- High7.8In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to persist even after uninstalling due to aCheck if you run itEPSS 0.10%Dec 8, 2025
- Medium6.6In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking.Check if you run itEPSS 0.15%Dec 8, 2025
- High7.8In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion.Check if you run itEPSS 0.11%Dec 8, 2025
- Medium4.3In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permission check.Check if you run itEPSS 0.11%Dec 8, 2025
- High7.8In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper input validation.Check if you run itEPSS 0.11%Dec 8, 2025
- Medium5.5In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code.Check if you run itEPSS 0.09%Dec 8, 2025
- Medium5.5In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code.Check if you run itEPSS 0.08%Dec 8, 2025
- Medium5.5In multiple locations, there is a possible way to read files from another user due to a missing permission check.Check if you run itEPSS 0.08%Dec 8, 2025
- Medium5.5In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.Check if you run itEPSS 0.09%Dec 8, 2025
- Medium5.5In multiple locations, there is a possible permanent denial of service due to improper input validation.Check if you run itEPSS 0.08%Dec 8, 2025
- Medium5.5In multiple files, there is a possible way to reveal information across users due to a missing permission check.Check if you run itEPSS 0.18%Dec 8, 2025
- High7.8In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check.Check if you run itEPSS 0.08%Dec 8, 2025
- Medium6.6In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy.Check if you run itEPSS 0.11%Dec 8, 2025
- High7.8In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.Check if you run itEPSS 0.08%Dec 8, 2025
- High7.8In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check.Check if you run itEPSS 0.09%Dec 8, 2025
- High7.8In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation due to improper input validation.Check if you run itEPSS 0.09%Dec 8, 2025
- Medium6.5In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow.Check if you run itEPSS 0.35%Dec 8, 2025
- Medium5.5In multiple locations, there is a possible way to read files from another user due to a missing permission check.Check if you run itEPSS 0.09%Dec 8, 2025
- Medium5.5In verifyAndGetBypass of AppOpsService.java, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to resource exhausCheck if you run itEPSS 0.10%Dec 8, 2025
- High7.8In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code.Check if you run itEPSS 0.10%Dec 8, 2025
- High7.8In startAlwaysOnVpn of Vpn.java, there is a possible way to disable always-on VPN due to a logic error in the code.Check if you run itEPSS 0.09%Dec 8, 2025
- High7.8In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy.Check if you run itEPSS 0.09%Dec 8, 2025
Sort