Vulnerabilities > Google > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-06-07 CVE-2021-30532 Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google fedoraproject
4.3
2021-06-07 CVE-2021-30533 Incorrect Authorization vulnerability in multiple products
Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.
network
low complexity
google fedoraproject CWE-863
6.5
2021-06-07 CVE-2021-30534 Incorrect Authorization vulnerability in multiple products
Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
network
low complexity
google fedoraproject CWE-863
6.5
2021-06-07 CVE-2021-30537 Incorrect Authorization vulnerability in multiple products
Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page.
network
low complexity
google fedoraproject CWE-863
4.3
2021-06-07 CVE-2021-30538 Incorrect Authorization vulnerability in multiple products
Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google fedoraproject CWE-863
4.3
2021-06-07 CVE-2021-30539 Incorrect Authorization vulnerability in multiple products
Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.
network
low complexity
google fedoraproject CWE-863
5.4
2021-06-07 CVE-2021-30540 Injection vulnerability in multiple products
Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
network
low complexity
google fedoraproject CWE-74
6.5
2021-05-14 CVE-2021-29516 Unspecified vulnerability in Google Tensorflow
TensorFlow is an end-to-end open source platform for machine learning.
local
low complexity
google
5.5
2021-05-14 CVE-2021-29517 Unspecified vulnerability in Google Tensorflow
TensorFlow is an end-to-end open source platform for machine learning.
local
low complexity
google
5.5
2021-05-14 CVE-2021-29519 Unspecified vulnerability in Google Tensorflow
TensorFlow is an end-to-end open source platform for machine learning.
local
low complexity
google
5.5