Total
277558 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-34616 | 1 Samsung | 1 Android | 2024-08-12 | 5.1 Medium |
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. | ||||
CVE-2024-34615 | 1 Samsung | 1 Android | 2024-08-12 | 5.1 Medium |
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. | ||||
CVE-2024-34614 | 1 Samsung | 1 Android | 2024-08-12 | 7.3 High |
Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. | ||||
CVE-2024-34613 | 1 Samsung | 1 Wear Os | 2024-08-12 | 4 Medium |
Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. | ||||
CVE-2024-34612 | 1 Samsung | 1 Android | 2024-08-12 | 7.3 High |
Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. | ||||
CVE-2024-34611 | 1 Samsung | 1 Android | 2024-08-12 | 5.1 Medium |
Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information. | ||||
CVE-2024-34610 | 1 Samsung | 1 Android | 2024-08-12 | 5.1 Medium |
Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data. | ||||
CVE-2024-34609 | 1 Samsung | 1 Android | 2024-08-12 | 6.2 Medium |
Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. | ||||
CVE-2024-34608 | 1 Samsung | 1 Android | 2024-08-12 | 6.2 Medium |
Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. | ||||
CVE-2024-34607 | 1 Samsung | 1 Android | 2024-08-12 | 6.2 Medium |
Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. | ||||
CVE-2024-34606 | 1 Samsung | 1 Android | 2024-08-12 | 6.2 Medium |
Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. | ||||
CVE-2024-34605 | 1 Samsung | 1 Android | 2024-08-12 | 6.2 Medium |
Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. | ||||
CVE-2024-34604 | 1 Samsung | 1 Android | 2024-08-12 | 6.2 Medium |
Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. | ||||
CVE-2024-7550 | 1 Google | 1 Chrome | 2024-08-12 | 8.8 High |
Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||||
CVE-2024-7536 | 1 Google | 1 Chrome | 2024-08-12 | 8.8 High |
Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||||
CVE-2024-7533 | 2 Apple, Google | 2 Iphone Os, Chrome | 2024-08-12 | 8.8 High |
Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||||
CVE-2024-7532 | 1 Google | 1 Chrome | 2024-08-12 | 8.8 High |
Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | ||||
CVE-2024-42219 | 1 1password | 1 1password | 2024-08-12 | 7 High |
1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient. | ||||
CVE-2024-42218 | 1 1password | 1 1password | 2024-08-12 | 6.3 Medium |
1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms. | ||||
CVE-2024-31200 | 1 Proges | 2 Sensor Net Connect Firmware V2, Sensor Net Connect V2 | 2024-08-12 | 4.2 Medium |
A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext when an administrative session is open in the browser. |