CVE Intelligence
Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

Severidade
Limpar

98 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2024-4947 Crítica · 9.6 KEV Alta · 66 Exploit público CWE-843 15/05/2024
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2024-4761 Alta · 8.8 KEV Alta · 61 Exploit público CWE-787 14/05/2024
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVE-2024-4671 Crítica · 9.6 KEV Alta · 59 CWE-416 14/05/2024
Google Chromium Visuals Use-After-Free Vulnerability
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2024-29745 Média · 5.5 KEV CWE-908 05/04/2024
Android Pixel Information Disclosure Vulnerability
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29748 Alta · 7.8 KEV Alta · 49 CWE-755 05/04/2024
Android Pixel Privilege Escalation Vulnerability
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2024-0519 Alta · 8.8 KEV Alta · 60 Exploit público CWE-787 16/01/2024
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-7024 Alta · 8.8 KEV Alta · 61 Exploit público CWE-787 21/12/2023
Google Chromium WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-6345 Crítica · 9.6 KEV Alta · 63 CWE-190 29/11/2023
Google Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2023-5217 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 28/09/2023
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4863 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/09/2023
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-35674 Alta · 7.8 KEV Alta · 60 Exploit público CWE-269 11/09/2023
Android Framework Privilege Escalation Vulnerability
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-4762 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 05/09/2023
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2023-21237 Média · 5.5 KEV CWE-200 28/06/2023
Android Pixel Information Disclosure Vulnerability
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912
CVE-2023-3079 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 05/06/2023
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-2136 Crítica · 9.6 KEV Alta · 59 CWE-190 19/04/2023
Google Chrome Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2023-2033 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 14/04/2023
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-20963 Alta · 7.8 KEV Alta · 58 Exploit público CWE-295 24/03/2023
Android Framework Privilege Escalation Vulnerability
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519
CVE-2022-4262 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 02/12/2022
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022
Google Chromium GPU Heap Buffer Overflow Vulnerability
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2022-3723 Alta · 8.8 KEV Alta · 55 CWE-843 01/11/2022
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-3075 Crítica · 9.6 KEV Alta · 59 CWE-20 26/09/2022
Google Chromium Mojo Insufficient Data Validation Vulnerability
Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2022-2856 Média · 6.5 KEV Alta · 52 CWE-20 26/09/2022
Google Chromium Intents Insufficient Input Validation Vulnerability
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
CVE-2022-3038 Alta · 8.8 KEV Alta · 56 CWE-416 26/09/2022
Google Chromium Network Service Use-After-Free Vulnerability
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-2294 Alta · 8.8 KEV Alta · 66 Ransomware CWE-787 27/07/2022
WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1364 Alta · 8.8 KEV Alta · 61 Exploit público CWE-843 26/07/2022
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.