Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2021-06-21 CVE-2021-0505 Missing Authorization vulnerability in Google Android 11.0
In the Settings app, there is a possible way to disable an always-on VPN due to a missing permission check.
local
low complexity
google CWE-862
7.2
2021-06-21 CVE-2021-0507 Out-of-bounds Write vulnerability in Google Android
In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check.
low complexity
google CWE-787
8.3
2021-06-21 CVE-2021-0511 Unspecified vulnerability in Google Android 10.0/11.0/9.0
In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation.
local
low complexity
google
7.8
2021-06-21 CVE-2021-0516 Use After Free vulnerability in Google Android
In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free.
network
low complexity
google CWE-416
7.5
2021-06-15 CVE-2021-30544 Use After Free vulnerability in multiple products
Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-06-15 CVE-2021-30545 Use After Free vulnerability in multiple products
Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-06-15 CVE-2021-30546 Use After Free vulnerability in multiple products
Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-06-15 CVE-2021-30547 Out-of-bounds Write vulnerability in multiple products
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
network
low complexity
google debian fedoraproject mozilla CWE-787
8.8
2021-06-15 CVE-2021-30548 Use After Free vulnerability in multiple products
Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8
2021-06-15 CVE-2021-30549 Use After Free vulnerability in multiple products
Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject CWE-416
8.8