2021

In pf_write_buf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local

In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmar

In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to inte

In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingIntent

In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds ch

In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use aft

In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due t

In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in

In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a mis

In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This cou

In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead

In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission c

In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROF

In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due

In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This

In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local

In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to uncle

In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca

In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to loc

In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth devi

In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of un

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Information Disclosure Vulnerability

Windows Installer Elevation of Privilege Vulnerability

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value co

Microsoft Excel Remote Code Execution Vulnerability

Windows Digital Media Receiver Elevation of Privilege Vulnerability

Windows TCP/IP Driver Elevation of Privilege Vulnerability

Windows Digital TV Tuner Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

NTFS Set Short Name Elevation of Privilege Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Windows Remote Access Elevation of Privilege Vulnerability

Windows Setup Elevation of Privilege Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Windows Fax Service Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Event Tracing Remote Code Execution Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

SymCrypt Denial of Service Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability