Vulnerabilities > Google > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-08-12 | CVE-2022-2612 | Information Exposure Through Discrepancy vulnerability in multiple products Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. | 6.5 |
| 2022-08-12 | CVE-2022-2615 | Reliance on Cookies without Validation and Integrity Checking vulnerability in multiple products Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. | 6.5 |
| 2022-08-12 | CVE-2022-2616 | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafted Chrome Extension. | 6.5 |
| 2022-08-12 | CVE-2022-2618 | Improper Input Validation vulnerability in multiple products Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file . | 6.5 |
| 2022-08-12 | CVE-2022-2619 | Improper Encoding or Escaping of Output vulnerability in multiple products Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page. | 4.3 |
| 2022-08-12 | CVE-2022-2622 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file. | 6.5 |
| 2022-08-12 | CVE-2022-20253 | Improper Handling of Exceptional Conditions vulnerability in Google Android 13.0 In Bluetooth, there is a possible cleanup failure due to an uncaught exception. | 6.5 |
| 2022-08-12 | CVE-2022-20255 | Missing Authorization vulnerability in Google Android 13.0 In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. | 4.4 |
| 2022-08-12 | CVE-2022-20256 | Race Condition vulnerability in Google Android 13.0 In the Audio HAL, there is a possible out of bounds write due to a race condition. | 6.4 |
| 2022-08-12 | CVE-2022-20259 | Missing Authorization vulnerability in Google Android 13.0 In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. | 5.5 |