Vulnerabilities > Google > Low

DATE CVE VULNERABILITY TITLE RISK
2020-12-14 CVE-2020-0019 Use of Hard-coded Credentials vulnerability in Google Android
In the Broadcom Nexus firmware, there is an insecure default password.
local
low complexity
google CWE-798
2.1
2020-12-14 CVE-2020-0459 Incorrect Default Permissions vulnerability in Google Android
In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check.
local
low complexity
google CWE-276
2.1
2020-12-14 CVE-2020-0464 Information Exposure Through Discrepancy vulnerability in Google Android 10.0
In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure.
local
low complexity
google CWE-203
2.1
2020-12-14 CVE-2020-0467 Unspecified vulnerability in Google Android
In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue.
local
low complexity
google
2.1
2020-12-14 CVE-2020-0468 Incorrect Default Permissions vulnerability in Google Android 10.0/11.0
In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check.
local
low complexity
google CWE-276
2.1
2020-12-14 CVE-2020-0469 Unspecified vulnerability in Google Android 11.0
In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error.
local
low complexity
google
2.1
2020-12-10 CVE-2020-26268 Unspecified vulnerability in Google Tensorflow
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable.
local
low complexity
google
3.6
2020-12-10 CVE-2020-26270 Improper Input Validation vulnerability in Google Tensorflow
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend.
local
low complexity
google CWE-20
2.1
2020-12-10 CVE-2020-8908 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir().
local
low complexity
google quarkus oracle netapp CWE-732
3.3
2020-12-10 CVE-2020-26271 Out-of-bounds Read vulnerability in Google Tensorflow
In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph.
local
low complexity
google CWE-125
2.1