[ Vendor · 935 CVEs ]
CVEs affecting Google published in the last 30 days, plus any Google CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-95314 | 29 Sep 2026 | CVSS 8.1 | Google ChromeIncorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-95315 | 29 Sep 2026 | CVSS 7.8 | Google ChromeUse after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via… | |
| CVE-2026-95316 | 29 Sep 2026 | CVSS 2.9 | Google ChromeUnchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local… | |
| CVE-2026-95317 | 29 Sep 2026 | CVSS 3.1 | Google ChromeIncorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95301 | 29 Sep 2026 | CVSS 8.1 | Google ChromeMissing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95302 | 29 Sep 2026 | CVSS 2.9 | Google ChromeIncorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a… | |
| CVE-2026-95303 | 29 Sep 2026 | CVSS 6.5 | Google ChromeIncomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-95304 | 29 Sep 2026 | CVSS 8.8 | Google ChromeOut of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95305 | 29 Sep 2026 | CVSS 4.8 | Google ChromeUI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-95306 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-95307 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-95308 | 29 Sep 2026 | CVSS 3.4 | Google ChromeInteger overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-95293 | 29 Sep 2026 | CVSS 4.7 | Google ChromeUninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML… | |
| CVE-2026-95294 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements… | |
| CVE-2026-95295 | 29 Sep 2026 | CVSS 4.6 | Google ChromeInformation leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical… | |
| CVE-2026-95296 | 29 Sep 2026 | CVSS 4.3 | Google ChromeMissing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95297 | 29 Sep 2026 | CVSS 6.5 | Google ChromeMissing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted… | |
| CVE-2026-95298 | 29 Sep 2026 | CVSS 7.8 | Google ChromeUse after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-95299 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-95300 | 29 Sep 2026 | CVSS 4.8 | Google ChromeMissing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-95284 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the… | |
| CVE-2026-95285 | 29 Sep 2026 | CVSS 8.4 | Google ChromeMissing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-95286 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95287 | 29 Sep 2026 | CVSS 5.4 | Google ChromeMissing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95288 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-95289 | 29 Sep 2026 | CVSS 4.3 | Google ChromeIncorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95290 | 29 Sep 2026 | CVSS 5.4 | Google ChromeMissing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-95291 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a… | |
| CVE-2026-95292 | 29 Sep 2026 | CVSS 4.8 | Google ChromeIncorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via… | |
| CVE-2026-95277 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-95278 | 29 Sep 2026 | CVSS 8.4 | Google ChromeMissing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95279 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted… | |
| CVE-2026-95280 | 29 Sep 2026 | CVSS 7.5 | Google ChromeRace condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-95281 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the… | |
| CVE-2026-95282 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95283 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside… | |
| CVE-2026-95274 | 29 Sep 2026 | CVSS 8.3 | Google ChromeImproper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95275 | 29 Sep 2026 | CVSS 6.5 | Google ChromeIncorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a… | |
| CVE-2026-95276 | 29 Sep 2026 | CVSS 8.3 | Google ChromeImproper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-102242 | 29 Sep 2026 | CVSS 8.6 | Google MCP Toolbox for DatabasesImproper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0… | |
| CVE-2026-13018 | 28 Sep 2026 | CVSS 4.3 | Google ChromeInsufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of… | |
| CVE-2026-87723 | 28 Sep 2026 | CVSS 5.4 | Google fuse-archiveIn Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled… | |
| CVE-2026-96812 | 25 Sep 2026 | CVSS 8.8 | Google gVisorImproper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with… | |
| CVE-2026-58704 | 15 Sep 2026 | CVSS 8.8 | Google Pixel Improper AuthorizationIn Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation… | Exploited |
| CVE-2026-87491 | 9 Sep 2026 | CVSS 8.8 | Google Chromium V8 Out of Bounds WriteOut of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | Exploited |
| CVE-2026-85046 | 3 Sep 2026 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | ExploitedFix |
| CVE-2026-10032 | 4 Aug 2026 | CVSS 6.1 | @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actionsThe openUrl function in @a2ui/web_core passes an agent-controlled URL directly to window.open() without validating the URI scheme. A malicious agent… | Fix |
| CVE-2026-11645 | 9 Jun 2026 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds Read and WriteOut of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via… | Exploited |
| CVE-2025-48595 | 1 Jun 2026 | CVSS 8.4 | Android Framework Integer OverflowIn multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege… | Exploited |
| CVE-2026-5281 | 1 Apr 2026 | CVSS 8.8 | Google Dawn Use-After-FreeUse after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute… | Exploited |
| CVE-2026-3909 | 13 Mar 2026 | CVSS 8.8 | Google Skia Out-of-Bounds WriteOut of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted… | Exploited |
| CVE-2026-3910 | 13 Mar 2026 | CVSS 8.8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory BufferInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a… | Exploited |
| CVE-2026-2441 | 13 Feb 2026 | CVSS 8.8 | Google Chromium CSS Use-After-FreeUse after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… | Exploited |
| CVE-2025-14174 | 12 Dec 2025 | CVSS 8.8 | Google Chromium Out of Bounds Memory AccessOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access… | Exploited |
| CVE-2025-48633 | 8 Dec 2025 | CVSS 5.5 | Android Framework Information DisclosureIn hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in… | ExploitedFix |
| CVE-2025-48572 | 8 Dec 2025 | CVSS 7.8 | Android Framework Privilege EscalationIn multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to local… | Exploited |
| CVE-2025-13223 | 17 Nov 2025 | CVSS 8.8 | Google Chromium V8 Type ConfusionType Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2025-10585 | 24 Sep 2025 | CVSS 9.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2025-48543 | 4 Sep 2025 | CVSS 8.8 | Android Runtime Use-After-FreeIn multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to… | ExploitedFix |
| CVE-2025-6558 | 15 Jul 2025 | CVSS 8.8 | Google Chromium ANGLE and GPU Improper Input ValidationInsufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform… | Exploited |
| CVE-2025-6554 | 30 Jun 2025 | CVSS 8.1 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page… | Exploited |
| CVE-2025-5419 | 3 Jun 2025 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds Read and WriteOut of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2025-2783 | 26 Mar 2025 | CVSS 8.3 | Google Chromium Mojo Sandbox EscapeIncorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to… | Exploited |
| CVE-2024-43093 | 13 Nov 2024 | CVSS 7.3 | Android Framework Privilege EscalationIn shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive… | ExploitedFix |
| CVE-2024-7971 | 21 Aug 2024 | CVSS 9.6 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium… | ExploitedFix |
| CVE-2024-7965 | 21 Aug 2024 | CVSS 8.8 | Google Chromium V8 Inappropriate ImplementationInappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2024-32896 | 13 Jun 2024 | CVSS 7.8 | Android Pixel Privilege Escalationthere is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution… | Exploited |
| CVE-2024-5274 | 28 May 2024 | CVSS 9.6 | Google Chromium V8 Type ConfusionType Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… | Exploited |
| CVE-2024-4947 | 15 May 2024 | CVSS 9.6 | Google Chromium V8 Type ConfusionType Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… | Exploited |
| CVE-2024-4761 | 14 May 2024 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds Memory WriteOut of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted… | Exploited |
| CVE-2024-4671 | 14 May 2024 | CVSS 9.6 | Google Chromium Visuals Use-After-FreeUse after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially… | Exploited |
| CVE-2024-29745 | 5 Apr 2024 | CVSS 5.5 | Android Pixel Information Disclosurethere is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution… | Exploited |
| CVE-2024-29748 | 5 Apr 2024 | CVSS 7.8 | Android Pixel Privilege Escalationthere is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution… | Exploited |
| CVE-2024-29748 | 5 Apr 2024 | CVSS 7.8 | Android Pixel Privilege Escalationthere is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution… | Exploited |
| CVE-2024-0519 | 16 Jan 2024 | CVSS 8.8 | Google Chromium V8 Out-of-Bounds Memory AccessOut of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2023-7024 | 21 Dec 2023 | CVSS 8.8 | Google Chromium WebRTC Heap Buffer OverflowHeap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2023-6345 | 29 Nov 2023 | CVSS 9.6 | Google Skia Integer OverflowInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially… | Exploited |
| CVE-2023-5217 | 28 Sep 2023 | CVSS 8.8 | Google Chromium libvpx Heap Buffer OverflowHeap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially… | ExploitedFix |
| CVE-2023-4863 | 12 Sep 2023 | CVSS 8.8 | Google Chromium WebP Heap-Based Buffer OverflowHeap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds… | ExploitedFix |
| CVE-2023-35674 | 11 Sep 2023 | CVSS 7.8 | Android Framework Privilege EscalationIn onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local… | ExploitedFix |
| CVE-2023-4762 | 5 Sep 2023 | CVSS 8.8 | Google Chromium V8 Type ConfusionType Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium… | ExploitedFix |
| CVE-2023-21237 | 28 Jun 2023 | CVSS 5.5 | Android Pixel Information DisclosureIn applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or… | Exploited |
| CVE-2023-3079 | 5 Jun 2023 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2023-2136 | 19 Apr 2023 | CVSS 9.6 | Google Chrome Skia Integer OverflowInteger overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially… | Exploited |
| CVE-2023-2033 | 14 Apr 2023 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2022-4262 | 2 Dec 2022 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | ExploitedFix |
| CVE-2022-4135 | 25 Nov 2022 | CVSS 9.6 | Google Chromium GPU Heap Buffer OverflowHeap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to… | Exploited |
| CVE-2022-3723 | 1 Nov 2022 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | Exploited |
| CVE-2022-3075 | 26 Sep 2022 | CVSS 9.6 | Google Chromium Mojo Insufficient Data ValidationInsufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to… | Exploited |
| CVE-2022-2856 | 26 Sep 2022 | CVSS 6.5 | Google Chromium Intents Insufficient Input ValidationInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily… | ExploitedFix |
| CVE-2022-3038 | 26 Sep 2022 | CVSS 8.8 | Google Chromium Network Service Use-After-FreeUse after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2022-2294 | 28 Jul 2022 | CVSS 8.8 | WebRTC Heap Buffer OverflowHeap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
| CVE-2022-1364 | 26 Jul 2022 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted… | ExploitedFix |
| CVE-2022-1096 | 23 Jul 2022 | CVSS 8.8 | Google Chromium V8 Type ConfusionType confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2022-0609 | 5 Apr 2022 | CVSS 8.8 | Google Chromium Animation Use-After-FreeUse after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted… | Exploited |
| CVE-2021-39793 | 16 Mar 2022 | CVSS 7.8 | Google Pixel Out-of-Bounds WriteIn kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to… | Exploited |
| CVE-2021-4102 | 11 Feb 2022 | CVSS 8.8 | Google Chromium V8 Use-After-FreeUse after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Exploited |
| CVE-2021-38000 | 23 Nov 2021 | CVSS 6.1 | Google Chromium Intents Improper Input ValidationInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily… | Exploited |
| CVE-2021-38000 | 23 Nov 2021 | CVSS 6.1 | Google Chromium Intents Improper Input ValidationInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily… | Exploited |
| CVE-2021-38003 | 23 Nov 2021 | CVSS 8.8 | Google Chromium V8 Memory CorruptionInappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a… | Exploited |
Page 9 of 10