Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 12735 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-3049 2 Fedoraproject, Google 4 Fedora, Chrome, Chrome Os and 1 more 2025-05-21 N/A 8.8 HIGH
Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.
CVE-2022-3048 2 Fedoraproject, Google 3 Fedora, Chrome, Chrome Os 2025-05-21 N/A 6.8 MEDIUM
Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a local attacker to bypass lockscreen navigation restrictions via physical access to the device.
CVE-2019-5797 1 Google 1 Chrome 2025-05-20 N/A 7.5 HIGH
Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2025-4664 1 Google 1 Chrome 2025-05-16 N/A 4.3 MEDIUM
Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2023-32878 2 Google, Mediatek 22 Android, Mt6762, Mt6765 and 19 more 2025-05-16 N/A 4.4 MEDIUM
In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08307992.
CVE-2024-20007 2 Google, Mediatek 34 Android, Mt6580, Mt6739 and 31 more 2025-05-15 N/A 7.5 HIGH
In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369.
CVE-2024-20001 2 Google, Mediatek 59 Android, Mt5583, Mt5586 and 56 more 2025-05-15 N/A 6.7 MEDIUM
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961601; Issue ID: DTV03961601.
CVE-2024-1284 2 Fedoraproject, Google 2 Fedora, Chrome 2025-05-15 N/A 9.8 CRITICAL
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2022-38670 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 7.8 HIGH
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVE-2022-20464 1 Google 1 Android 2025-05-15 N/A 5.5 MEDIUM
In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-236042696References: N/A
CVE-2022-20397 1 Google 1 Android 2025-05-15 N/A 7.8 HIGH
In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223086933References: N/A
CVE-2021-0699 1 Google 1 Android 2025-05-15 N/A 7.8 HIGH
In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-242345178
CVE-2024-0809 2 Fedoraproject, Google 2 Fedora, Chrome 2025-05-15 N/A 4.3 MEDIUM
Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2022-39120 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 5.5 MEDIUM
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39113 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 5.5 MEDIUM
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVE-2022-39109 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 7.8 HIGH
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVE-2022-39108 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 7.8 HIGH
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVE-2022-39107 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 7.8 HIGH
In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.
CVE-2022-39105 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 5.5 MEDIUM
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
CVE-2022-39103 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-15 N/A 5.5 MEDIUM
In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed.