Vulnerabilities (CVE)

Total 414305 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48428 1 Siemens 1 Sinec Ins 2026-06-17 N/A 7.2 HIGH
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service condition or potentially issue commands on system level.
CVE-2023-48427 1 Siemens 1 Sinec Ins 2026-06-17 N/A 8.1 HIGH
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to manipulate responses, potentially allowing an attacker to escalate privileges.
CVE-2023-48426 1 Google 8 Chromecast Firmware, Chromecast Ga00439, Chromecast Ga3a00403a14 and 5 more 2026-06-17 N/A 10.0 CRITICAL
u-boot bug that allows for u-boot shell and interrupt over UART
CVE-2023-48425 1 Google 2 Chromecast, Chromecast Firmware 2026-06-17 N/A 9.8 CRITICAL
U-Boot vulnerability resulting in persistent Code Execution 
CVE-2023-48424 1 Google 2 Chromecast, Chromecast Firmware 2026-06-17 N/A 9.8 CRITICAL
U-Boot shell vulnerability resulting in Privilege escalation in a production device
CVE-2023-48423 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48422 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48421 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48420 1 Google 1 Android 2026-06-17 N/A 6.4 MEDIUM
there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48419 1 Google 8 Home, Home Firmware, Home Mini and 5 more 2026-06-17 N/A 10.0 CRITICAL
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege 
CVE-2023-48418 1 Google 2 Pixel Watch, Pixel Watch Firmware 2026-06-17 N/A 10.0 CRITICAL
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completion due to an insecure default     value. This could lead to local escalation of privilege with no additional     execution privileges needed. User interaction is not needed for     exploitation
CVE-2023-48417 1 Google 2 Chromecast, Chromecast Firmware 2026-06-17 N/A 9.8 CRITICAL
Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application
CVE-2023-48416 1 Google 1 Android 2026-06-17 N/A 7.5 HIGH
In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48415 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48414 1 Google 1 Android 2026-06-17 N/A 6.7 MEDIUM
In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48413 1 Google 1 Android 2026-06-17 N/A 4.9 MEDIUM
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48412 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48411 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVE-2023-48410 1 Google 1 Android 2026-06-17 N/A 7.5 HIGH
In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-48409 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.