Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially se…EPSS 0.3%May 6, 2026
- Medium4.2Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer pr…EPSS 0.2%May 6, 2026
- Medium4.4Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject arbitrary scripts or HTML (U…EPSS 0.1%May 6, 2026
- Medium4.3Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.EPSS 0.2%May 6, 2026
- High7.8Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file.EPSS 0.1%May 6, 2026
- Medium4.2Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read…EPSS 0.2%May 6, 2026
- High8.3Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proce…EPSS 0.3%May 6, 2026
- High7.5In nr modem, there is a possible improper input validation.EPSS 0.3%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.EPSS 0.3%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.EPSS 0.3%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.EPSS 0.3%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.EPSS 0.3%May 6, 2026
- High7.5In IMS, there is a possible system crash due to improper input validation.EPSS 0.3%May 6, 2026
- High8.8In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code.EPSS 0.5%May 4, 2026
- Critical9.6Notesnook is a note-taking app focused on user privacy & ease of use.EPSS 0.8%May 4, 2026
- Low2.9A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android.EPSS 0.6%May 3, 2026
- Medium5.3The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0.EPSS 0.5%May 2, 2026
- Medium4.3Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 to v2.26.15.72 and WhatsApp for Android v2.25.8.0 to v2.26.7.10 co…EPSS 0.5%May 1, 2026
- Medium6.9Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction o…EPSS 0.1%Apr 29, 2026
- High8.3Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a…EPSS 0.3%Apr 28, 2026
- High8.8Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.EPSS 0.5%Apr 28, 2026
- Critical9.6Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform…EPSS 0.3%Apr 23, 2026
- High7.5Mitigation bypass in Firefox for Android.EPSS 0.4%Apr 21, 2026
- High7.1Apktool is a tool for reverse engineering Android APK files.EPSS 0.2%Apr 21, 2026
- High7.4Lawnchair is a free, open-source home app for Android.EPSS 3.0%Apr 21, 2026