Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2023-09-04 CVE-2023-38459 Missing Authorization vulnerability in Google Android 11.0
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
local
low complexity
google CWE-862
7.8
2023-09-04 CVE-2023-38460 Missing Authorization vulnerability in Google Android 11.0
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
local
low complexity
google CWE-862
7.8
2023-09-04 CVE-2023-38464 Missing Authorization vulnerability in Google Android 11.0
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
local
low complexity
google CWE-862
7.8
2023-08-29 CVE-2023-4572 Use After Free vulnerability in multiple products
Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2023-08-25 CVE-2019-13689 Link Following vulnerability in Google Chrome
Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file.
local
low complexity
google CWE-59
7.8
2023-08-25 CVE-2022-4452 Unspecified vulnerability in Google Chrome
Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
network
low complexity
google
8.8
2023-08-23 CVE-2023-4427 Out-of-bounds Read vulnerability in multiple products
Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
network
low complexity
google fedoraproject CWE-125
8.1
2023-08-23 CVE-2023-4428 Out-of-bounds Read vulnerability in multiple products
Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-125
8.1
2023-08-23 CVE-2023-4429 Use After Free vulnerability in multiple products
Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8
2023-08-23 CVE-2023-4430 Use After Free vulnerability in multiple products
Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google fedoraproject debian CWE-416
8.8