Vulnerabilities > Google

DATE CVE VULNERABILITY TITLE RISK
2017-03-08 CVE-2017-0467 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing.
network
google CWE-119
critical
9.3
2017-03-08 CVE-2017-0466 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Android
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing.
network
google CWE-119
critical
9.3
2017-03-07 CVE-2016-10200 Use After Free vulnerability in multiple products
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
local
high complexity
linux google CWE-416
7.0
2017-02-17 CVE-2017-5027 Unspecified vulnerability in Google Chrome
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google
4.3
2017-02-17 CVE-2017-5026 Improper Restriction of Rendered UI Layers or Frames vulnerability in Google Chrome
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.
network
low complexity
google CWE-1021
4.3
2017-02-17 CVE-2017-5025 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Chrome
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
local
low complexity
google CWE-119
5.5
2017-02-17 CVE-2017-5024 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Chrome
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
local
low complexity
google CWE-119
5.5
2017-02-17 CVE-2017-5023 NULL Pointer Dereference vulnerability in Google Chrome
Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.
network
low complexity
google CWE-476
4.3
2017-02-17 CVE-2017-5022 Unspecified vulnerability in Google Chrome
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google
4.3
2017-02-17 CVE-2017-5021 Use After Free vulnerability in Google Chrome
A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
network
low complexity
google CWE-416
4.3