Vulnerabilities > Google > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-01-07 CVE-2019-9465 Unspecified vulnerability in Google Android
In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause.
local
low complexity
google
5.5
2020-01-06 CVE-2019-9472 Information Exposure Through Discrepancy vulnerability in Google Android
In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto.
local
low complexity
google CWE-203
5.5
2020-01-06 CVE-2019-9471 Out-of-bounds Write vulnerability in Google Android
In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
6.7
2020-01-06 CVE-2019-9470 Out-of-bounds Write vulnerability in Google Android
In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check.
local
low complexity
google CWE-787
6.7
2020-01-03 CVE-2019-5846 Out-of-bounds Write vulnerability in multiple products
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google opensuse CWE-787
6.5
2020-01-03 CVE-2019-5845 Out-of-bounds Write vulnerability in multiple products
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google opensuse CWE-787
6.5
2020-01-03 CVE-2019-5844 Out-of-bounds Write vulnerability in multiple products
Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google opensuse CWE-787
6.5
2020-01-03 CVE-2019-13766 Use After Free vulnerability in Google Chrome
Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
6.5
2020-01-03 CVE-2019-13765 Improper Initialization vulnerability in Google Chrome
Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-665
6.5
2019-12-10 CVE-2019-13763 Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
network
low complexity
google debian fedoraproject redhat
4.3