Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-04-17	CVE-2024-3843	Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. network low complexity google fedoraproject	4.3
2024-04-17	CVE-2024-3844	Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. network low complexity google fedoraproject	4.3
2024-04-17	CVE-2024-3845	Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. network low complexity google fedoraproject	4.3
2024-04-17	CVE-2024-3846	Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. network low complexity google fedoraproject	4.3
2024-04-17	CVE-2024-3847	Cross-site Scripting vulnerability in multiple products Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. network low complexity google fedoraproject CWE-79	6.1
2024-04-10	CVE-2024-3515	Use After Free vulnerability in multiple products Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google fedoraproject CWE-416	6.5
2024-04-10	CVE-2024-3516	Out-of-bounds Write vulnerability in multiple products Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google fedoraproject CWE-787	6.5
2024-04-08	CVE-2023-52345	Unspecified vulnerability in Google Android 12.0/13.0/14.0 In modem driver, there is a possible system crash due to improper input validation. local low complexity google	6.0
2024-04-08	CVE-2023-52349	Out-of-bounds Write vulnerability in Google Android 12.0/13.0/14.0 In ril service, there is a possible out of bounds write due to a missing bounds check. local low complexity google CWE-787	4.4
2024-04-08	CVE-2023-52350	Out-of-bounds Write vulnerability in Google Android 12.0/13.0/14.0 In ril service, there is a possible out of bounds write due to a missing bounds check. local low complexity google CWE-787	4.4