Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2021-01-08 CVE-2020-16013 Out-of-bounds Write vulnerability in Google Chrome
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2021-01-05 CVE-2021-22492 Classic Buffer Overflow vulnerability in Google Android
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software.
low complexity
google CWE-120
8.8
2020-12-31 CVE-2020-35864 Unspecified vulnerability in Google Flatbuffers
An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust.
network
low complexity
google
7.5
2020-12-24 CVE-2020-35693 Unspecified vulnerability in Google Android
On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offers a connectable BLE advertisement.
low complexity
google
8.8
2020-12-18 CVE-2020-35555 Unspecified vulnerability in Google Android 10.0
An issue was discovered on LG mobile devices with Android OS 10 software.
local
low complexity
google
7.8
2020-12-18 CVE-2020-35554 Unspecified vulnerability in Google Android
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software.
local
low complexity
google
7.8
2020-12-18 CVE-2020-35553 Improper Restriction of Power Consumption vulnerability in Google Android 10.0/11.0
An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software.
network
low complexity
google CWE-920
7.5
2020-12-15 CVE-2020-27055 Missing Encryption of Sensitive Data vulnerability in Google Android 11.0
In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation.
network
low complexity
google CWE-311
7.5
2020-12-15 CVE-2020-27054 Missing Authorization vulnerability in Google Android 11.0
In onFactoryReset of BluetoothManagerService.java, there is a missing permission check.
local
low complexity
google CWE-862
7.8
2020-12-15 CVE-2020-27052 Missing Authorization vulnerability in Google Android 11.0
In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass.
local
low complexity
google CWE-862
7.8