Vulnerabilities > Google > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-06-07 | CVE-2019-2091 | Missing Authorization vulnerability in Google Android In GetPermittedAccessibilityServicesForUser of DevicePolicyManagerService.java, there is a possible permissions bypass due to a missing permission check. | 7.8 |
| 2019-06-07 | CVE-2019-2090 | Missing Authorization vulnerability in Google Android In isPackageDeviceAdminOnAnyUser of PackageManagerService.java, there is a possible permissions bypass due to a missing permissions check. | 7.8 |
| 2019-05-30 | CVE-2018-20840 | Improper Check for Unusual or Exceptional Conditions vulnerability in Google API C++ Client 0.1 An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. | 8.6 |
| 2019-05-23 | CVE-2019-5796 | Out-of-bounds Write vulnerability in multiple products Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 7.5 |
| 2019-05-23 | CVE-2019-5795 | Integer Overflow or Wraparound vulnerability in multiple products Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. | 8.8 |
| 2019-05-23 | CVE-2019-5792 | Integer Overflow or Wraparound vulnerability in multiple products Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. | 8.8 |
| 2019-05-23 | CVE-2019-5791 | Type Confusion vulnerability in multiple products Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. | 8.8 |
| 2019-05-23 | CVE-2019-5790 | Integer Overflow or Wraparound vulnerability in multiple products An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. | 8.8 |
| 2019-05-23 | CVE-2019-5789 | Use After Free vulnerability in multiple products An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. | 8.8 |
| 2019-05-23 | CVE-2019-5788 | Use After Free vulnerability in multiple products An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. | 8.8 |