Vulnerabilities > Google

DATE CVE VULNERABILITY TITLE RISK
2018-02-07 CVE-2017-15391 Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.
network
low complexity
google debian
6.5
2018-02-07 CVE-2017-15390 Improper Input Validation vulnerability in multiple products
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
network
low complexity
google debian CWE-20
6.5
2018-02-07 CVE-2017-15389 Improper Input Validation vulnerability in multiple products
An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
network
low complexity
google debian CWE-20
6.5
2018-02-07 CVE-2017-15388 Out-of-bounds Read vulnerability in multiple products
Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
network
low complexity
google debian CWE-125
8.8
2018-02-07 CVE-2017-15387 Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.
network
low complexity
google debian
8.8
2018-02-07 CVE-2017-15386 Improper Input Validation vulnerability in multiple products
Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
network
low complexity
google debian CWE-20
6.5
2018-02-06 CVE-2017-6279 Out-of-bounds Write vulnerability in Google Android
NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process.
local
low complexity
google CWE-787
7.8
2018-02-06 CVE-2017-6258 Out-of-bounds Write vulnerability in Google Android
NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process.
local
low complexity
google CWE-787
7.8
2018-01-23 CVE-2016-5345 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713.
local
high complexity
google CWE-119
7.0
2018-01-18 CVE-2017-17860 Improper Input Validation vulnerability in Google Android
In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key.
low complexity
google CWE-20
5.7