Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-11-23 CVE-2021-38002 Use After Free vulnerability in multiple products
Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
critical
9.6
2021-10-22 CVE-2021-0870 Race Condition vulnerability in Google Android
In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition.
network
google CWE-362
critical
9.3
2021-10-08 CVE-2021-37973 Use After Free vulnerability in multiple products
Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
critical
9.6
2021-10-08 CVE-2021-30633 Use After Free vulnerability in multiple products
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
critical
9.6
2021-08-03 CVE-2021-30571 Incorrect Authorization vulnerability in multiple products
Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject CWE-863
critical
9.6
2021-07-14 CVE-2021-0514 Race Condition vulnerability in Google Android
In several functions of the V8 library, there is a possible use after free due to a race condition.
network
google CWE-362
critical
9.3
2021-07-14 CVE-2021-0515 Out-of-bounds Write vulnerability in Google Android
In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
critical
10.0
2021-07-14 CVE-2021-0592 Out-of-bounds Write vulnerability in Google Android
In various functions in WideVine, there are possible out of bounds writes due to improper input validation.
network
google CWE-787
critical
9.3
2021-06-30 CVE-2021-35958 Path Traversal vulnerability in Google Tensorflow
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True.
network
low complexity
google CWE-22
critical
9.1
2021-06-14 CVE-2021-0324 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android SoCAndroid ID: A-175402462
network
low complexity
google
critical
10.0