cve.nowby Sazabi

Google CVEs

9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2018-17459Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the…Medium · 6.5Jan 9, 2019
CVE-2018-17458An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to…High · 8.8Jan 9, 2019
CVE-2018-17457An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote…High · 8.8Jan 9, 2019
CVE-2018-16088A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download…Medium · 6.5Jan 9, 2019
CVE-2018-16087Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation…Medium · 4.3Jan 9, 2019
CVE-2018-16085A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap…High · 8.8Jan 9, 2019
CVE-2018-16084The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the…Medium · 6.1Jan 9, 2019
CVE-2018-16083An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to…High · 8.8Jan 9, 2019
CVE-2018-16082An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds…Medium · 6.5Jan 9, 2019
CVE-2018-16081Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who…High · 7.4Jan 9, 2019
CVE-2018-16080A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof…Medium · 6.5Jan 9, 2019
CVE-2018-16079A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to…Medium · 5.3Jan 9, 2019
CVE-2018-16078Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially…Medium · 6.5Jan 9, 2019
CVE-2018-16076Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read…High · 8.8Jan 9, 2019
CVE-2018-16072A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same…Medium · 6.5Jan 9, 2019
CVE-2018-16071A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a…High · 8.8Jan 9, 2019
CVE-2018-16068Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a…Critical · 9.6Jan 9, 2019
CVE-2018-16067A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a…Medium · 6.5Jan 9, 2019
CVE-2018-16066A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a…Medium · 6.5Jan 9, 2019
CVE-2018-16065A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to…High · 8.8Jan 9, 2019
CVE-2017-15428Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome…High · 8.8Jan 9, 2019
CVE-2017-15405Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance…High · 7.0Jan 9, 2019
CVE-2017-15404An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in…High · 7.8Jan 9, 2019
CVE-2017-15403Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome…High · 7.3Jan 9, 2019
CVE-2017-15402Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the…Critical · 9.6Jan 9, 2019
CVE-2017-15401A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to…High · 8.8Jan 9, 2019
CVE-2016-9651A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to…High · 8.8Jan 9, 2019
CVE-2016-10403Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of…High · 8.8Jan 9, 2019
CVE-2018-18359Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perform an out of bounds…High · 8.8Dec 11, 2018
CVE-2018-18358Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment…Medium · 5.7Dec 11, 2018