Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-09	CVE-2022-48385	Out-of-bounds Write vulnerability in Google Android 11.0/12.0 In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. local low complexity google CWE-787	4.4
2023-05-09	CVE-2022-48386	Use After Free vulnerability in Google Android 11.0/12.0 the apipe driver, there is a possible use after free due to a logic error. local low complexity google CWE-416	4.4
2023-05-09	CVE-2022-48387	Out-of-bounds Write vulnerability in Google Android 11.0/12.0 the apipe driver, there is a possible out of bounds write due to a missing bounds check. local low complexity google CWE-787	4.4
2023-05-09	CVE-2022-48389	Out-of-bounds Write vulnerability in Google Android 10.0 In modem control device, there is a possible out of bounds write due to a missing bounds check. local low complexity google CWE-787	4.4
2023-05-08	CVE-2023-1979	Incorrect Authorization vulnerability in Google web Stories The Web Stories for WordPress plugin supports the WordPress built-in functionality of protecting content with a password. network low complexity google CWE-863	6.5
2023-05-03	CVE-2023-2459	Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. network low complexity google debian fedoraproject	6.5
2023-05-03	CVE-2023-2462	Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. network low complexity google fedoraproject debian	4.3
2023-05-03	CVE-2023-2463	Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. network low complexity google fedoraproject debian	4.3
2023-05-03	CVE-2023-2464	Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. network low complexity google fedoraproject debian	4.3
2023-05-03	CVE-2023-2465	Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. network low complexity google fedoraproject debian	4.3