Vulnerabilities > Google > High

DATE CVE VULNERABILITY TITLE RISK
2017-01-19 CVE-2016-5198 Out-of-bounds Write vulnerability in multiple products
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
network
low complexity
google redhat CWE-787
8.8
2017-01-19 CVE-2016-5197 Improper Input Validation vulnerability in Google Chrome
The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.
network
low complexity
google CWE-20
8.8
2017-01-19 CVE-2016-5196 7PK - Security Features vulnerability in Google Chrome
The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.
network
low complexity
google CWE-254
8.8
2017-01-18 CVE-2014-9910 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google CWE-264
7.0
2017-01-18 CVE-2014-9909 Permissions, Privileges, and Access Controls vulnerability in Google Android
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel.
local
high complexity
google CWE-264
7.0
2017-01-12 CVE-2016-6492 Permissions, Privileges, and Access Controls vulnerability in Google Android
The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.
local
low complexity
google CWE-264
7.8
2017-01-12 CVE-2017-0394 Unspecified vulnerability in Google Android
A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot.
network
low complexity
google
7.5
2017-01-12 CVE-2017-0389 Improper Input Validation vulnerability in Google Android
A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot.
network
low complexity
google CWE-20
7.5
2017-01-12 CVE-2017-0387 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google
7.8
2017-01-12 CVE-2017-0386 Unspecified vulnerability in Google Android
An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process.
local
low complexity
google
7.8