Vulnerabilities > Google > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-03-20 CVE-2024-2631 Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google fedoraproject
4.3
2024-03-11 CVE-2024-0044 Injection vulnerability in Google Android
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.
local
low complexity
google CWE-74
6.7
2024-03-11 CVE-2024-0045 Out-of-bounds Read vulnerability in Google Android
In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation.
low complexity
google CWE-125
6.5
2024-03-11 CVE-2024-0047 Unspecified vulnerability in Google Android 14.0
In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code.
local
low complexity
google
5.5
2024-03-04 CVE-2024-20020 Out-of-bounds Write vulnerability in Google Android 13.0
In OPTEE, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google CWE-787
4.4
2024-03-04 CVE-2024-20022 In lk, there is a possible escalation of privilege due to a missing bounds check.
local
low complexity
linuxfoundation rdkcentral google openwrt
6.7
2024-02-21 CVE-2024-1671 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google
6.5
2024-02-21 CVE-2024-1672 Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google fedoraproject
5.4
2024-02-21 CVE-2024-1676 Cross-site Scripting vulnerability in multiple products
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page.
network
low complexity
google fedoraproject CWE-79
5.4
2024-02-16 CVE-2024-0016 Out-of-bounds Read vulnerability in Google Android
In multiple locations, there is a possible out of bounds read due to a missing bounds check.
network
low complexity
google CWE-125
5.3