Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (156 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-20052 5 Google, Linuxfoundation, Mediatek and 2 more 47 Android, Yocto, Mt2713 and 44 more 2025-04-23 4.4 Medium
In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541761.
CVE-2024-20053 5 Google, Linuxfoundation, Mediatek and 2 more 47 Android, Yocto, Mt2713 and 44 more 2025-04-23 8.4 High
In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541764.
CVE-2024-20055 3 Google, Linuxfoundation, Mediatek 19 Android, Yocto, Iot Yocto and 16 more 2025-04-23 6.3 Medium
In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.
CVE-2024-20025 2 Google, Mediatek 42 Android, Mt6739, Mt6757 and 39 more 2025-04-22 6.7 Medium
In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS08541686.
CVE-2024-20036 2 Google, Mediatek 11 Android, Mt6835, Mt6855 and 8 more 2025-04-22 4.4 Medium
In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS08509508.
CVE-2024-20034 2 Google, Mediatek 20 Android, Mt6761, Mt6765 and 17 more 2025-04-22 7.2 High
In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08488849; Issue ID: ALPS08488849.
CVE-2024-20033 2 Google, Mediatek 55 Android, Mt2713, Mt6739 and 52 more 2025-04-22 4.4 Medium
In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945.
CVE-2024-20131 1 Mediatek 33 Mt2737, Mt2739, Mt6789 and 30 more 2025-04-22 6.7 Medium
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1873.
CVE-2024-20133 1 Mediatek 12 Mt6879, Mt6886, Mt6895 and 9 more 2025-04-22 6.7 Medium
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871.
CVE-2024-20134 2 Google, Mediatek 14 Android, Mt6835, Mt6878 and 11 more 2025-04-22 6.7 Medium
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09154589; Issue ID: MSV-1866.
CVE-2024-20136 4 Google, Mediatek, Openwrt and 1 more 32 Android, Mt2737, Mt6781 and 29 more 2025-04-22 6.2 Medium
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.
CVE-2024-20120 2 Google, Mediatek 30 Android, Mt6765, Mt6768 and 27 more 2025-04-22 6.7 Medium
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1575.
CVE-2024-20121 2 Google, Mediatek 29 Android, Mt6765, Mt6768 and 26 more 2025-04-22 6.7 Medium
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1574.
CVE-2024-20125 2 Google, Mediatek 45 Android, Mt6580, Mt6761 and 42 more 2025-04-22 6.7 Medium
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privileges. User interaction is not needed for exploitation. Patch ID: ALPS09046782; Issue ID: MSV-1728.
CVE-2024-20127 2 Google, Mediatek 47 Android, Mt6580, Mt6739 and 44 more 2025-04-22 7.5 High
In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2023.
CVE-2024-20128 2 Google, Mediatek 47 Android, Mt6580, Mt6739 and 44 more 2025-04-22 7.5 High
In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2024.
CVE-2024-20108 2 Google, Mediatek 65 Android, Mt6580, Mt6739 and 62 more 2025-04-22 6.7 Medium
In atci, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09082988; Issue ID: MSV-1774.
CVE-2024-20116 2 Google, Mediatek 19 Android, Mt6765, Mt6768 and 16 more 2025-04-22 4.4 Medium
In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09057438; Issue ID: MSV-1696.
CVE-2024-20150 1 Mediatek 80 Lr12a, Lr13, Mt2735 and 77 more 2025-04-22 7.5 High
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018.
CVE-2024-20148 3 Google, Linuxfoundation, Mediatek 18 Android, Yocto, Mt3603 and 15 more 2025-04-22 9.8 Critical
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID: MSV-1796.