Vulnerabilidades em Google Inc.

960 resultados
Análise Vexday

Com 960 CVEs catalogadas e nenhuma entrada no catálogo KEV da CISA, o perfil de exploração ativa do Google Inc. está abaixo da média geral do catálogo, o que sugere menor pressão imediata de ataques em curso. Apesar da ausência de severidades críticas e de novas vulnerabilidades nos últimos 90 dias, há 16 CVEs com prova de conceito pública disponível, o que representa um vetor de risco concreto para equipes que ainda não aplicaram as correções correspondentes. A falha mais recorrente é CWE-269 (gerenciamento inadequado de privilégios), padrão que tipicamente favorece escalonamento de privilégios e movimentação lateral em ambientes comprometidos. A CVE mais perigosa atualmente rastreada é CVE-2017-0561, com EPSS de 0,30, indicando probabilidade não negligenciável de exploração e justificando atenção prioritária mesmo tratando-se de uma vulnerabilidade mais antiga.

CVE-2018-9427—In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbiEPSS 4.4%CVE-2018-9356—In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to remote code execution wiEPSS 4.3%CVE-2018-9503—In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remoEPSS 4.2%CVE-2017-0553—An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of EPSS 4.1%CVE-2017-0432—An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tEPSS 4.0%CVE-2017-0641—A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a deviceEPSS 4.0%CVE-2017-0582—An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary codeEPSS 4.0%CVE-2018-9496—In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check. This could lead EPSS 3.9%CVE-2017-0811—A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7EPSS 3.8%CVE-2017-0810—A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, EPSS 3.8%CVE-2018-9497—In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check. TEPSS 3.5%CVE-2018-9498—In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execEPSS 3.5%CVE-2017-0474—A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriEPSS 3.4%CVE-2017-0637—A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corrEPSS 3.4%CVE-2017-0809—A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0,EPSS 3.4%CVE-2018-9450—In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remoteEPSS 3.3%CVE-2017-0521—An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wEPSS 3.2%CVE-2017-0516—An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrarEPSS 3.1%CVE-2017-0518—An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbiEPSS 3.1%CVE-2017-0407—A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriEPSS 3.1%