Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-9506In avrc_msg_cback of avrc_api.cc, there is a possible out-of-bound read due to a missing bounds check.
- CVE-2018-9505In mca_ccb_hdl_req of mca_cact.cc, there is a possible out of bounds read due to a missing bounds check.
- CVE-2018-9504In sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2018-9503In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out of bounds read due to a missing bounds check.
- CVE-2018-9502In rfc_process_mx_message of rfc_ts_frames.cc, there is a possible out-of-bounds read due to a missing bounds check.
- CVE-2018-9501In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass.
- CVE-2018-9499In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data.
- CVE-2018-9498In SkSampler::Fill of SkSampler.cpp, there is a possible out of bounds write due to an integer overflow.
- CVE-2018-9497In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 of impeg2_format_conv.s there is a possible out of bounds write due to missing bounds check.
- CVE-2018-9496In ixheaacd_real_synth_fft_p3 of ixheaacd_esbr_fft.c there is a possible out of bounds write due to a missing bounds check.
- CVE-2018-9493In the content provider of the download manager, there is a possible SQL injection due to improper input validation.
- CVE-2018-9492In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass.
- CVE-2018-9491In AMediaCodecCryptoInfo_new of NdkMediaCodec.cpp, there is a possible out-of-bounds write due to an integer overflow.
- CVE-2018-9490In CollectValuesOrEntriesImpl of elements.cc, there is possible remote code execution due to type confusion.
- CVE-2018-9476In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible use-after-free due to improper locking.
- CVE-2018-9473In ihevcd_parse_sei_payload of ihevcd_parse_headers.c, there is a possible out-of-bounds write due to an integer overflow.
- CVE-2018-9452In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation.
- CVE-2018-6119Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox…
- CVE-2018-6055Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run…
- CVE-2018-6054Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a…
- CVE-2018-6053Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail…
- CVE-2018-6052Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to…
- CVE-2018-6051XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which…
- CVE-2018-6050Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox…
- CVE-2018-6049Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which…
- CVE-2018-6048Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer…
- CVE-2018-6047Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user…
- CVE-2018-6046Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user…
- CVE-2018-6043Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially…
- CVE-2018-6042Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox…