Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-04-11 CVE-2022-26099 NULL Pointer Dereference vulnerability in Google Android 10.0/11.0/12.0
Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers.
network
low complexity
google CWE-476
critical
9.1
2022-04-11 CVE-2022-27567 NULL Pointer Dereference vulnerability in Google Android 10.0/11.0/12.0
Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers.
network
low complexity
google CWE-476
critical
9.8
2022-04-11 CVE-2022-27568 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
network
low complexity
google CWE-787
critical
9.8
2022-04-11 CVE-2022-27569 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
network
low complexity
google CWE-787
critical
9.8
2022-04-11 CVE-2022-27570 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
network
low complexity
google CWE-787
critical
9.8
2022-04-11 CVE-2022-27571 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
network
low complexity
google CWE-787
critical
9.8
2022-04-11 CVE-2022-27572 Out-of-bounds Write vulnerability in Google Android 10.0/11.0/12.0
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
network
low complexity
google CWE-787
critical
9.8
2022-04-05 CVE-2022-0452 Use After Free vulnerability in Google Chrome
Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google CWE-416
critical
9.6
2022-04-05 CVE-2022-0466 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google
critical
9.6
2022-04-05 CVE-2022-0790 Use After Free vulnerability in Google Chrome
Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google CWE-416
critical
9.6