Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 16604 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-23706 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-23705 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2024-23704 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-23698 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-23697 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-23696 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-23695 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-23658 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 4.4 MEDIUM
In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
CVE-2024-22013 1 Google 6 Nest Wifi Point, Nest Wifi Point Firmware, Nest Wifi Pro and 3 more 2026-06-17 N/A 5.3 MEDIUM
U-Boot environment is read from unauthenticated partition.
CVE-2024-22012 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22011 1 Google 1 Android 2026-06-17 N/A 7.5 HIGH
In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22010 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22009 1 Google 1 Android 2026-06-17 N/A 7.1 HIGH
In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22008 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22007 1 Google 1 Android 2026-06-17 N/A 6.2 MEDIUM
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22006 1 Google 1 Android 2026-06-17 N/A 5.3 MEDIUM
OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
CVE-2024-22005 1 Google 1 Android 2026-06-17 N/A 8.4 HIGH
there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-22004 1 Google 6 Nest Wifi Point, Nest Wifi Point Firmware, Nest Wifi Pro and 3 more 2026-06-17 N/A 10.0 CRITICAL
Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application
CVE-2024-21382 2 Google, Microsoft 2 Android, Edge Chromium 2026-06-17 N/A 4.3 MEDIUM
Microsoft Edge for Android Information Disclosure Vulnerability
CVE-2024-20854 2 Google, Samsung 2 Android, Camera 2026-06-17 N/A 5.9 MEDIUM
Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data.