Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 7.8

    HIGH
    CVE-2017-13220

    An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13219

    A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller. Product: Android. Versions: Android kernel. Android ID: A-62800865.... Read more

    Affected Products : android
    • EPSS Score: %0.16
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 4.7

    MEDIUM
    CVE-2017-13218

    Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4... Read more

    Affected Products : android
    • EPSS Score: %0.02
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13217

    In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege enabling code execution as a privileged pr... Read more

    Affected Products : android
    • EPSS Score: %0.03
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13216

    In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed.... Read more

    Affected Products : android
    • EPSS Score: %0.91
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13215

    A elevation of privilege vulnerability in the Upstream kernel skcipher. Product: Android. Versions: Android kernel. Android ID: A-64386293. References: Upstream kernel.... Read more

    Affected Products : android
    • EPSS Score: %0.11
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13214

    In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: A... Read more

    Affected Products : android
    • EPSS Score: %1.52
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13213

    An elevation of privilege vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-63374465. References: B-V2017081501.... Read more

    Affected Products : android
    • EPSS Score: %0.03
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13212

    An elevation of privilege vulnerability in the Android system (systemui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62187985.... Read more

    Affected Products : android
    • EPSS Score: %0.03
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13211

    In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. This could lead to a remote denial of service of a critical system process with no additional execution ... Read more

    Affected Products : android
    • EPSS Score: %3.68
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13210

    In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional executio... Read more

    Affected Products : android
    • EPSS Score: %0.04
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2017-13209

    In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a loca... Read more

    Affected Products : android
    • EPSS Score: %0.47
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2017-13208

    In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User in... Read more

    Affected Products : android
    • EPSS Score: %15.73
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13207

    An information disclosure vulnerability in the Android media framework (stagefright mpeg4writer). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37564426.... Read more

    Affected Products : android
    • EPSS Score: %0.09
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13206

    An information disclosure vulnerability in the Android media framework (aacdec). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65025048.... Read more

    Affected Products : android
    • EPSS Score: %0.09
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 9.1

    CRITICAL
    CVE-2017-13205

    An information disclosure vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64550583.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 9.1

    CRITICAL
    CVE-2017-13204

    An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64380237.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 9.1

    CRITICAL
    CVE-2017-13203

    An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63122634.... Read more

    Affected Products : android
    • EPSS Score: %0.10
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13202

    An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67647856.... Read more

    Affected Products : android
    • EPSS Score: %0.09
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2017-13201

    An information disclosure vulnerability in the Android media framework (mediadrm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63982768.... Read more

    Affected Products : android
    • EPSS Score: %0.11
    • Published: Jan. 12, 2018
    • Modified: Nov. 21, 2024
Showing 20 of 291712 Results