Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-0956 Out-of-bounds Write vulnerability in Google Android 11.0/12.0
In NfcTag::discoverTechnologies (activation) of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check.
network
low complexity
google CWE-787
critical
9.8
2021-12-15 CVE-2021-39641 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A
network
low complexity
google
critical
9.8
2021-12-15 CVE-2021-39644 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
network
low complexity
google
critical
9.8
2021-12-15 CVE-2021-39645 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
network
low complexity
google
critical
9.8
2021-12-15 CVE-2021-39655 Unspecified vulnerability in Google Android
Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A
network
low complexity
google
critical
9.8
2021-11-23 CVE-2021-38002 Use After Free vulnerability in multiple products
Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
critical
9.6
2021-11-02 CVE-2020-6492 Use After Free vulnerability in Google Chrome
Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google CWE-416
critical
9.6
2021-11-02 CVE-2021-37981 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google debian CWE-787
critical
9.6
2021-10-08 CVE-2021-37973 Use After Free vulnerability in multiple products
Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
critical
9.6
2021-10-08 CVE-2021-30633 Use After Free vulnerability in multiple products
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
critical
9.6