Vulnerabilities > Google

DATE CVE VULNERABILITY TITLE RISK
2023-09-12 CVE-2023-4906 Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page.
network
low complexity
google fedoraproject debian
4.3
4.3
2023-09-12 CVE-2023-4907 Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page.
network
low complexity
google fedoraproject debian
4.3
4.3
2023-09-12 CVE-2023-4908 Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page.
network
low complexity
google fedoraproject debian
4.3
4.3
2023-09-12 CVE-2023-4909 Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page.
network
low complexity
google fedoraproject debian
4.3
4.3
2023-09-12 CVE-2023-4863 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. 		8.8
8.8
2023-09-11 CVE-2023-35658 Use After Free vulnerability in Google Android
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free.
low complexity
google CWE-416
8.8
8.8
2023-09-11 CVE-2023-35664 Out-of-bounds Read vulnerability in Google Android 12.0/12.1/13.0
In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google CWE-125
5.5
5.5
2023-09-11 CVE-2023-35665 Missing Authorization vulnerability in Google Android
In multiple files, there is a possible way to import a contact from another user due to a missing permission check.
local
low complexity
google CWE-862
7.8
7.8
2023-09-11 CVE-2023-35666 Use After Free vulnerability in Google Android
In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code.
local
low complexity
google CWE-416
7.8
7.8
2023-09-11 CVE-2023-35667 Unspecified vulnerability in Google Android
In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code.
local
low complexity
google
7.8
7.8