- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2022-3095Incorrect parsing of the backslash characters in Dart library | Exploitation statusNot known exploited | FixYes | Affected productDart | Published10/27/2022 | SeverityCritical |
CVE-2022-3474Bazel leaks user credentials through the remote assets API | Exploitation statusNot known exploited | FixYes | Affected productBazel | Published10/26/2022 | SeverityMedium |
CVE-2022-3421Privilege escalation in Google Drive for Desktop on MacOS | Exploitation statusNot known exploited | FixYes | Affected productDrive for Desktop MacOS | Published10/17/2022 | SeverityMedium |
CVE-2022-3171Memory handling vulnerability in ProtocolBuffers Java core and lite | Exploitation statusNot known exploited | FixYes | Affected productProtocolbuffers | Published10/12/2022 | SeverityMedium |
CVE-2022-1941Out of Memory issue in ProtocolBuffers for cpp and python | Exploitation statusNot known exploited | FixNot confirmed | Affected productprotobuf-cpp | Published09/22/2022 | SeverityHigh |
CVE-2022-1798Path Traversal vulnerability in Kubevirt | Exploitation statusPublic exploit | FixYes | Affected productKubevirt | Published09/15/2022 | SeverityHigh |
CVE-2022-2390Mutable pending intent in Google Play services SDK | Exploitation statusNot known exploited | FixYes | Affected productPlay Services SDK | Published08/12/2022 | SeverityMedium |
CVE-2022-1799Incorrect signature verification on Google play-services-basement in Google Play SDK | Exploitation statusNot known exploited | FixYes | Affected productGoogle Play Services SDK | Published07/29/2022 | SeverityMedium |
CVE-2022-0882Illegal access to Kernel log in Fuchsia | Exploitation statusPublic exploit | FixYes | Affected productFuchsia Kernel | Published05/03/2022 | SeverityMedium |
CVE-2021-22556Integer Overflow in Fuchsia Kernel | Exploitation statusNot known exploited | FixYes | Affected productFuchsia Kernel | Published05/03/2022 | SeverityMedium |
CVE-2021-22573Incorrect signature verification on Google-oauth-java-client | Exploitation statusNot known exploited | FixYes | Affected productGoogle-oauth-java-client | Published05/03/2022 | SeverityHigh |
CVE-2022-0343Local Priviledge escalation in Perfetto Dev scripts | Exploitation statusNot known exploited | FixNot confirmed | Affected productPerfetto Dev Scripts | Published03/29/2022 | SeverityLow |
CVE-2021-22572Data-transfer-project information disclosure via tmp directory | Exploitation statusNot known exploited | FixYes | Affected productData-Transfer-Project | Published03/29/2022 | SeverityMedium |
CVE-2021-22571Information Leak in SA360-webquery-bigquery through read on /tmp | Exploitation statusNot known exploited | FixNot confirmed | Affected productgoogle/sa360-webquery-bigquery | Published03/18/2022 | SeverityMedium |
CVE-2022-0247Write access to VMO data through copy-on-write in Fuchsia | Exploitation statusNot known exploited | FixYes | Affected productFuchsia | Published02/25/2022 | SeverityHigh |
CVE-2022-25328Privilege escalation through command injection in fscrypt | Exploitation statusNot known exploited | FixNot confirmed | Affected productfscrypt | Published02/25/2022 | SeverityMedium |
CVE-2022-25327Local Denial of Service in fscrypt PAM module | Exploitation statusNot known exploited | FixNot confirmed | Affected productfscrypt | Published02/25/2022 | SeverityMedium |
CVE-2022-25326Denial of Service in fscrypt | Exploitation statusNot known exploited | FixNot confirmed | Affected productfscrypt | Published02/25/2022 | SeverityMedium |
CVE-2022-0451Auth bypass in Dark SDK | Exploitation statusNot known exploited | FixYes | Affected productDart SDK | Published02/18/2022 | SeverityMedium |
CVE-2022-0317Improper Input Validation in AKPublic.Verify in go-attestation | Exploitation statusNot known exploited | FixYes | Affected productgo-attestation | Published02/04/2022 | SeverityMedium |
CVE-2021-22570Nullptr Dereference in Protobuf | Exploitation statusNot known exploited | FixYes | Affected productProtobuf | Published01/26/2022 | SeverityMedium |
CVE-2021-22566Incorrect mapping of Executable bits in Fuchsia Kernel | Exploitation statusNot known exploited | FixYes | Affected productFuchsia | Published01/18/2022 | SeverityMedium |
CVE-2021-22569Denial of Service of protobuf-java parsing procedure | Exploitation statusPublic exploit | FixYes | Affected productprotobuf-java | Published01/07/2022 | SeverityHigh |
CVE-2021-22567Bidirectional Override in Dart SDK | Exploitation statusNot known exploited | FixYes | Affected productDart SDK | Published01/05/2022 | SeverityMedium |
CVE-2021-22568Dart - Publishing to third-party package repositories may expose pub.dev credentials | Exploitation statusNot confirmed | FixYes | Affected productDart SDK | Published12/09/2021 | SeverityHigh |
CVE-2021-22565Insufficient Granularity of Access Control in GAEN Notification Server | Exploitation statusNot confirmed | FixYes | Affected productGoogle Exposure-notifications-verification-server | Published12/09/2021 | SeverityMedium |
CVE-2021-22564Out of bounds Copy in Libjxl in large image groups | Exploitation statusNot confirmed | FixNot confirmed | Affected productlibjxl | Published11/01/2021 | SeverityMedium |
CVE-2021-22563Memory Overread in libjxl | Exploitation statusNot confirmed | FixNot confirmed | Affected productlibjxl | Published11/01/2021 | SeverityMedium |
CVE-2021-22557Code execution in SLO Generator via YAML Payload | Exploitation statusNot confirmed | FixNot confirmed | Affected productSLO Generator | Published10/04/2021 | SeverityMedium |
CVE-2021-22552Memory overread secure enclave in Asylo 0.6.2 | Exploitation statusNot confirmed | FixNot confirmed | Affected productAsylo | Published08/02/2021 | SeverityMedium |
CVE-2021-22545Use-after-free in BinDiff | Exploitation statusNot confirmed | FixYes | Affected productBindiff | Published06/29/2021 | SeverityHigh |
CVE-2021-22550Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer | Exploitation statusNot confirmed | FixNot confirmed | Affected productAsylo | Published06/08/2021 | SeverityMedium |
CVE-2021-22549Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall | Exploitation statusNot confirmed | FixNot confirmed | Affected productAsylo | Published06/08/2021 | SeverityMedium |
CVE-2021-22548Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall | Exploitation statusNot confirmed | FixNot confirmed | Affected productAsylo | Published06/08/2021 | SeverityMedium |
CVE-2021-22547Buffer overrun in Google Cloud IoT Device SDK for Embedded C | Exploitation statusNot confirmed | FixNot confirmed | Affected productGoogle Cloud IoT Device SDK for Embedded C | Published05/04/2021 | SeverityMedium |
CVE-2021-22540XSS in Dart SDK | Exploitation statusNot confirmed | FixYes | Affected productDart SDK | Published04/22/2021 | SeverityUnknown |
CVE-2021-22539Code execution in VSCode-bazel via malicious Bazel config files | Exploitation statusNot confirmed | FixYes | Affected productVSCode-Bazel | Published04/16/2021 | SeverityHigh |
CVE-2021-22538Privilege escalation in RBAC system | Exploitation statusNot confirmed | FixNot confirmed | Affected productExposure Notifications Verification Server | Published03/31/2021 | SeverityMedium |
CVE-2020-8902SSRF in Rendertron | Exploitation statusNot confirmed | FixYes | Affected productRendertron | Published02/23/2021 | SeverityLow |
CVE-2021-22553Heap Memory exhaustion in Gerrit | Exploitation statusNot confirmed | FixYes | Affected productGerrit | Published02/17/2021 | SeverityMedium |
CVE-2020-8944Unchecked buffer overrun in ecall_restore | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8942Unchecked buffer overrun in enc_untrusted_read | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8943Unchecked buffer overrun in enc_untrusted_recvfrom | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8941Unchecked buffer overrun in enc_untrusted_inet_pton | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8940Unchecked buffer overrun in enc_untrusted_recvmsg | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8938Arbitrary enclave memory location write from untrusted environment | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8939Out of Bounds read in Asylo | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8937Arbitrary enclave memory location write from untrusted environment | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8936Arbitrary enclave memory overwrite vulnerability in ECall ecall_restore | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8935 | Exploitation statusNot confirmed | FixNot confirmed | Affected productAsylo | Published12/15/2020 | SeverityMedium |
CVE-2020-8908Temp directory permission issue in Guava | Exploitation statusNot confirmed | FixYes | Affected productGuava | Published12/10/2020 | SeverityLow |
CVE-2020-8929Ciphertext integrity weakness in Tink | Exploitation statusNot confirmed | FixYes | Affected productTink | Published10/19/2020 | SeverityMedium |
CVE-2020-8927Buffer overflow in Brotli library | Exploitation statusNot known exploited | FixNot confirmed | Affected productBrotli | Published09/15/2020 | SeverityMedium |
CVE-2020-8905Confidential Information Disclosure vulnerability in Asylo | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published08/12/2020 | SeverityLow |
CVE-2020-8904Arbitrary trusted memory overwrite vulnerability in Asylo | Exploitation statusNot confirmed | FixYes | Affected productAsylo | Published08/12/2020 | SeverityMedium |
CVE-2020-8913Local arbitrary code execution in splitinstall in Android's Play Core | Exploitation statusNot confirmed | FixYes | Affected productAndroid Play Core | Published08/12/2020 | SeverityHigh |
CVE-2020-8912In-band key negotiation issue in AWS S3 Crypto SDK for GoLang | Exploitation statusNot confirmed | FixNot confirmed | Affected productAWS S3 Crypto SDK for GoLang | Published08/11/2020 | SeverityLow |
CVE-2020-8911CBC padding oracle in AWS S3 Crypto SDK for GoLang | Exploitation statusNot confirmed | FixNot confirmed | Affected productAWS S3 Crypto SDK for GoLang | Published08/11/2020 | SeverityMedium |
CVE-2020-8918TPM 1.2 key authorization values are vulnerable to a TPM transport eavesdropper | Exploitation statusNot confirmed | FixYes | Affected productgoogle/go-tpm library | Published08/11/2020 | SeverityMedium |
CVE-2020-8916Memory leak in wpanctl can lead to DoS | Exploitation statusNot confirmed | FixYes | Affected productwpantund | Published07/07/2020 | SeverityMedium |
CVE-2020-8933Priviged Escalation in Google Cloud Platform's Guest-OSLogin | Exploitation statusNot known exploited | FixYes | Affected productguest-oslogin | Published06/22/2020 | SeverityCritical |
CVE-2020-8907Priviged Escalation in Google Cloud Platform's Guest-OSLogin | Exploitation statusPublic exploit | FixYes | Affected productguest-oslogin | Published06/22/2020 | SeverityCritical |
CVE-2020-8903Priviged Escalation in Google Cloud Platform's Guest-OSLogin | Exploitation statusNot confirmed | FixYes | Affected productguest-oslogin | Published06/22/2020 | SeverityHigh |
CVE-2020-8896Buffer Overflow in Google Earth Pro | Exploitation statusNot confirmed | FixNot confirmed | Affected productGoogle Earth Pro | Published05/04/2020 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan