Vulnerabilities (CVE)

Filtered by vendor Google Subscribe
Total 13440 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-48345 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-06-02 N/A 5.5 MEDIUM
In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVE-2024-20083 2 Google, Mediatek 25 Android, Mt6765, Mt6768 and 22 more 2025-05-30 N/A 9.8 CRITICAL
In venc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08810810 / ALPS08805789; Issue ID: MSV-1502.
CVE-2024-0814 2 Fedoraproject, Google 2 Fedora, Chrome 2025-05-30 N/A 6.5 MEDIUM
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-0812 2 Fedoraproject, Google 2 Fedora, Chrome 2025-05-30 N/A 8.8 HIGH
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-0808 3 Debian, Fedoraproject, Google 3 Debian Linux, Fedora, Chrome 2025-05-30 N/A 9.8 CRITICAL
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
CVE-2025-5064 1 Google 1 Chrome 2025-05-29 N/A 5.4 MEDIUM
Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5065 1 Google 1 Chrome 2025-05-29 N/A 6.5 MEDIUM
Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5066 1 Google 1 Chrome 2025-05-29 N/A 6.5 MEDIUM
Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5067 1 Google 1 Chrome 2025-05-29 N/A 5.4 MEDIUM
Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2025-5280 1 Google 1 Chrome 2025-05-29 N/A 8.8 HIGH
Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-5281 1 Google 1 Chrome 2025-05-29 N/A 5.4 MEDIUM
Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-1060 2 Fedoraproject, Google 2 Fedora, Chrome 2025-05-29 N/A 8.8 HIGH
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-42706 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 5.5 MEDIUM
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVE-2023-42698 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 5.5 MEDIUM
In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVE-2023-42685 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 7.8 HIGH
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVE-2023-42681 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 7.8 HIGH
In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVE-2023-42747 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 7.8 HIGH
In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVE-2023-42736 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 7.8 HIGH
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVE-2023-42726 2 Google, Unisoc 12 Android, S8000, Sc9863a and 9 more 2025-05-29 N/A 4.4 MEDIUM
In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVE-2023-42716 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-05-29 N/A 7.5 HIGH
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed