CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

98 result(s)

Export this search: RSS · CSV · STIX
CVE-2024-4947 Critical · 9.6 KEV High · 66 Public exploit CWE-843 May 15, 2024
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2024-4761 High · 8.8 KEV High · 61 Public exploit CWE-787 May 14, 2024
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVE-2024-4671 Critical · 9.6 KEV High · 59 CWE-416 May 14, 2024
Google Chromium Visuals Use-After-Free Vulnerability
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2024-29745 Medium · 5.5 KEV CWE-908 Apr 5, 2024
Android Pixel Information Disclosure Vulnerability
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-29748 High · 7.8 KEV High · 49 CWE-755 Apr 5, 2024
Android Pixel Privilege Escalation Vulnerability
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2024-0519 High · 8.8 KEV High · 60 Public exploit CWE-787 Jan 16, 2024
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-7024 High · 8.8 KEV High · 61 Public exploit CWE-787 Dec 21, 2023
Google Chromium WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-6345 Critical · 9.6 KEV High · 63 CWE-190 Nov 29, 2023
Google Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2023-5217 High · 8.8 KEV High · 62 Public exploit CWE-787 Sep 28, 2023
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4863 High · 8.8 KEV High · 62 Public exploit CWE-787 Sep 12, 2023
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-35674 High · 7.8 KEV High · 60 Public exploit CWE-269 Sep 11, 2023
Android Framework Privilege Escalation Vulnerability
In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-4762 High · 8.8 KEV High · 62 Public exploit CWE-843 Sep 5, 2023
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2023-21237 Medium · 5.5 KEV CWE-200 Jun 28, 2023
Android Pixel Information Disclosure Vulnerability
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912
CVE-2023-3079 High · 8.8 KEV High · 62 Public exploit CWE-843 Jun 5, 2023
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-2136 Critical · 9.6 KEV High · 59 CWE-190 Apr 19, 2023
Google Chrome Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2023-2033 High · 8.8 KEV High · 62 Public exploit CWE-843 Apr 14, 2023
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-20963 High · 7.8 KEV High · 58 Public exploit CWE-295 Mar 24, 2023
Android Framework Privilege Escalation Vulnerability
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519
CVE-2022-4262 High · 8.8 KEV High · 62 Public exploit CWE-843 Dec 2, 2022
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-4135 Critical · 9.6 KEV High · 60 CWE-787 Nov 24, 2022
Google Chromium GPU Heap Buffer Overflow Vulnerability
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2022-3723 High · 8.8 KEV High · 55 CWE-843 Nov 1, 2022
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-3075 Critical · 9.6 KEV High · 59 CWE-20 Sep 26, 2022
Google Chromium Mojo Insufficient Data Validation Vulnerability
Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2022-2856 Medium · 6.5 KEV High · 52 CWE-20 Sep 26, 2022
Google Chromium Intents Insufficient Input Validation Vulnerability
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
CVE-2022-3038 High · 8.8 KEV High · 56 CWE-416 Sep 26, 2022
Google Chromium Network Service Use-After-Free Vulnerability
Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-2294 High · 8.8 KEV High · 66 Ransomware CWE-787 Jul 27, 2022
WebRTC Heap Buffer Overflow Vulnerability
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-1364 High · 8.8 KEV High · 61 Public exploit CWE-843 Jul 26, 2022
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.