Vulnerabilities > Google > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-01-10 CVE-2023-0139 Improper Input Validation vulnerability in Google Chrome
Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page.
network
low complexity
google CWE-20
6.5
2023-01-10 CVE-2023-0140 Unspecified vulnerability in Google Chrome
Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.
network
low complexity
google
6.5
2023-01-10 CVE-2023-0141 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google
4.3
2023-01-04 CVE-2022-38678 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In contacts service, there is a missing permission check.
local
low complexity
google CWE-862
5.5
2023-01-04 CVE-2022-38682 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In contacts service, there is a missing permission check.
local
low complexity
google CWE-862
5.5
2023-01-04 CVE-2022-38683 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In contacts service, there is a missing permission check.
local
low complexity
google CWE-862
5.5
2023-01-04 CVE-2022-38684 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In contacts service, there is a missing permission check.
local
low complexity
google CWE-862
5.5
2023-01-04 CVE-2022-39081 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In network service, there is a missing permission check.
local
low complexity
google CWE-862
6.7
2023-01-04 CVE-2022-39082 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In network service, there is a missing permission check.
local
low complexity
google CWE-862
6.7
2023-01-04 CVE-2022-39083 Missing Authorization vulnerability in Google Android 10.0/11.0/12.0
In network service, there is a missing permission check.
local
low complexity
google CWE-862
6.7