Vulnerabilities in Google

7,838 results
CVE-2024-0044HIGHIn createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could leEPSS 1.5%CVE-2018-16066—A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 1.5%CVE-2022-2295—Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a craftedEPSS 1.5%CVE-2019-5759—Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to pEPSS 1.5%CVE-2019-5760—Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heEPSS 1.5%CVE-2019-13729—Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a cEPSS 1.5%CVE-2019-5805—Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafEPSS 1.5%CVE-2019-5820—Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crEPSS 1.5%CVE-2020-6377—Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a craftEPSS 1.5%CVE-2020-15991—Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer processEPSS 1.5%CVE-2021-21116—Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via aEPSS 1.5%CVE-2021-37970—Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption viEPSS 1.5%CVE-2021-21187—Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing vEPSS 1.5%CVE-2019-5799—Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attackerEPSS 1.5%CVE-2018-6108—Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform doEPSS 1.4%CVE-2018-18345—Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the rEPSS 1.4%CVE-2019-13724—Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderEPSS 1.4%CVE-2019-5870—Use after free in media in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a craftEPSS 1.4%CVE-2021-21223—Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentEPSS 1.4%CVE-2018-6047—Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirectEPSS 1.4%