Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2021-12-08 CVE-2021-25510 Improper Input Validation vulnerability in Google Android 10.0/11.0/9.0
An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution.
local
low complexity
google CWE-20
7.8
2021-12-08 CVE-2021-25511 Path Traversal vulnerability in Google Android 10.0/11.0/9.0
An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability.
local
low complexity
google CWE-22
7.8
2021-12-08 CVE-2021-25512 Improper Input Validation vulnerability in Google Android 10.0/11.0/9.0
An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities.
local
low complexity
google CWE-20
7.8
2021-12-08 CVE-2021-25516 Improper Handling of Exceptional Conditions vulnerability in Google Android 10.0/11.0/9.0
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.
network
low complexity
google CWE-755
7.5
2021-12-08 CVE-2021-25517 Improper Input Validation vulnerability in Google Android 10.0/11.0
An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.
local
low complexity
google CWE-20
7.8
2021-11-23 CVE-2021-37997 Use After Free vulnerability in multiple products
Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-11-23 CVE-2021-37998 Use After Free vulnerability in multiple products
Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2021-11-23 CVE-2021-38001 Type Confusion vulnerability in multiple products
Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-843
8.8
2021-11-23 CVE-2021-38003 Improper Handling of Exceptional Conditions vulnerability in multiple products
Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-755
8.8
2021-11-05 CVE-2021-41216 Out-of-bounds Write vulnerability in Google Tensorflow
TensorFlow is an open source platform for machine learning.
local
low complexity
google CWE-787
7.8