[ Vendor · 935 CVEs ]
CVEs affecting Google published in the last 30 days, plus any Google CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2021-37973 | 8 Oct 2021 | CVSS 9.6 | Google Chromium Portals Use-After-FreeUse after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially… | ExploitedFix |
| CVE-2021-37975 | 8 Oct 2021 | CVSS 8.8 | Google Chromium V8 Use-After-FreeUse after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-37976 | 8 Oct 2021 | CVSS 6.5 | Google Chromium Information DisclosureInappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information… | Exploited |
| CVE-2021-30632 | 8 Oct 2021 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds WriteOut of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2021-30633 | 8 Oct 2021 | CVSS 9.6 | Google Chromium Indexed DB API Use-After-FreeUse after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to… | Exploited |
| CVE-2021-30563 | 3 Aug 2021 | CVSS 8.8 | Google Chromium V8 Type ConfusionType Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-30554 | 2 Jul 2021 | CVSS 8.8 | Google Chromium WebGL Use-After-FreeUse after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2021-30551 | 15 Jun 2021 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-30533 | 7 Jun 2021 | CVSS 6.5 | Google Chromium PopupBlocker Security BypassInsufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions… | ExploitedFix |
| CVE-2021-21206 | 26 Apr 2021 | CVSS 8.8 | Google Chromium Blink Use-After-FreeUse after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2021-21220 | 26 Apr 2021 | CVSS 8.8 | Google Chromium V8 Improper Input ValidationInsufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap… | Exploited |
| CVE-2021-21224 | 26 Apr 2021 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… | Exploited |
| CVE-2021-21193 | 16 Mar 2021 | CVSS 8.8 | Google Chromium Blink Use-After-FreeUse after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2021-21166 | 9 Mar 2021 | CVSS 8.8 | Google Chromium Race ConditionData race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-21148 | 9 Feb 2021 | CVSS 8.8 | Google Chromium V8 Heap Buffer OverflowHeap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Exploited |
| CVE-2020-6572 | 14 Jan 2021 | CVSS 8.8 | Google Chrome Media Use-After-FreeUse after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page. | Exploited |
| CVE-2020-16013 | 8 Jan 2021 | CVSS 8.8 | Google Chromium V8 Incorrect Implementation VulnerabililtyInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2020-16017 | 8 Jan 2021 | CVSS 9.6 | Google Chrome Use-After-FreeUse after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to… | Exploited |
| CVE-2020-16009 | 3 Nov 2020 | CVSS 8.8 | Google Chromium V8 Type ConfusionInappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2020-16010 | 3 Nov 2020 | CVSS 9.6 | Google Chrome for Android UI Heap Buffer OverflowHeap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to… | Exploited |
| CVE-2020-16010 | 3 Nov 2020 | CVSS 9.6 | Google Chrome for Android UI Heap Buffer OverflowHeap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to… | Exploited |
| CVE-2020-15999 | 3 Nov 2020 | CVSS 9.6 | Google Chrome FreeType Heap Buffer OverflowHeap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2020-6418 | 27 Feb 2020 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ExploitedFix |
| CVE-2019-5825 | 25 Nov 2019 | CVSS 6.5 | Google Chromium V8 Out-of-Bounds WriteOut of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a… | ExploitedFix |
| CVE-2019-13720 | 25 Nov 2019 | CVSS 8.8 | Google Chrome WebAudio Use-After-FreeUse after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2019-5786 | 27 Jun 2019 | CVSS 6.5 | Google Chrome Blink Use-After-FreeObject lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access… | Exploited |
| CVE-2018-17480 | 11 Dec 2018 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds WriteExecution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80… | Exploited |
| CVE-2018-6065 | 14 Nov 2018 | CVSS 8.8 | Google Chromium V8 Integer OverflowInteger overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146… | Exploited |
| CVE-2018-17463 | 14 Nov 2018 | CVSS 8.8 | Google Chromium V8 Remote Code ExecutionIncorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox… | Exploited |
| CVE-2017-5070 | 27 Oct 2017 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to… | Exploited |
| CVE-2017-5030 | 24 Apr 2017 | CVSS 8.8 | Google Chromium V8 Memory CorruptionIncorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed… | Exploited |
| CVE-2016-5198 | 19 Jan 2017 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds MemoryV8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect… | Exploited |
| CVE-2016-1646 | 29 Mar 2016 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds ReadThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider… | ExploitedFix |
| CVE-2011-1823 | 9 Jun 2011 | CVSS 7.8 | Android OS Privilege EscalationThe vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local… | Exploited |
| CVE-2011-0609 | 15 Mar 2011 | CVSS 7.8 | Adobe Flash Player UnspecifiedUnspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android… | Exploited |
Page 10 of 10