Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.3

    HIGH
    CVE-2017-13277

    In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: ... Read more

    Affected Products : android
    • EPSS Score: %0.72
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13276

    In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitati... Read more

    Affected Products : android
    • EPSS Score: %1.91
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 5.5

    MEDIUM
    CVE-2017-13275

    In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional privileges needed. User interaction is needed for exploitation. Product: Andr... Read more

    Affected Products : android
    • EPSS Score: %0.04
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 9.8

    CRITICAL
    CVE-2017-13274

    In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation. Pro... Read more

    Affected Products : android
    • EPSS Score: %0.08
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.0

    HIGH
    CVE-2017-13273

    In xt_qtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android k... Read more

    Affected Products : android
    • EPSS Score: %0.01
    • Published: Feb. 15, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2017-13272

    In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product... Read more

    Affected Products : android
    • EPSS Score: %0.82
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13271

    A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13270

    A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 4.3

    MEDIUM
    CVE-2017-13269

    A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68818034.... Read more

    Affected Products : android
    • EPSS Score: %0.03
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 4.3

    MEDIUM
    CVE-2017-13268

    A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67058064.... Read more

    Affected Products : android
    • EPSS Score: %0.03
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2017-13267

    In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati... Read more

    Affected Products : android
    • EPSS Score: %3.01
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2017-13266

    In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Produ... Read more

    Affected Products : android
    • EPSS Score: %1.32
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13265

    A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13264

    A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343.... Read more

    Affected Products : android
    • EPSS Score: %0.11
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13263

    A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2017-13262

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for explo... Read more

    Affected Products : android
    • EPSS Score: %13.96
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13261

    In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for expl... Read more

    Affected Products : android
    • EPSS Score: %21.50
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13260

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Produ... Read more

    Affected Products : android
    • EPSS Score: %20.86
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13259

    In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for expl... Read more

    Affected Products : android
    • EPSS Score: %0.86
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13258

    In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Produ... Read more

    Affected Products : android
    • EPSS Score: %17.01
    • Published: Apr. 04, 2018
    • Modified: Nov. 21, 2024
Showing 20 of 291617 Results