Page 31 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3066 | High | 8.8 | 2025-04-02 | Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… |
CVE-2025-2713 | High | 7.8 | 2025-03-28 | Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unpriv… |
CVE-2025-2783 | High | 8.3 | 2025-03-26 | Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb… |
CVE-2025-2476 | High | 8.8 | 2025-03-19 | Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2025-1550 | Critical | 9.8 | 2025-03-11 | The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By al… |
CVE-2025-2137 | High | 8.8 | 2025-03-10 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr… |
CVE-2025-2136 | High | 8.8 | 2025-03-10 | Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2025-2135 | High | 8.8 | 2025-03-10 | Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-1920 | High | 8.8 | 2025-03-10 | Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2024-56192 | High | 7.8 | 2025-03-10 | In wl_notify_gscan_event of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2024-56191 | High | 8.4 | 2025-03-10 | In dhd_process_full_gscan_result of dhd_pno.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no add… |
CVE-2024-56188 | Medium | 5.1 | 2025-03-10 | there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service with no additional execution privileges nee… |
CVE-2024-56187 | Medium | 6.6 | 2025-03-10 | In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local informa… |
CVE-2024-56186 | Medium | 5.1 | 2025-03-10 | In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2024-56185 | Medium | 5.1 | 2025-03-10 | In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lea… |
CVE-2024-56184 | Medium | 5.1 | 2025-03-10 | In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2025-1121 | Medium | 6.8 | 2025-03-07 | Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain r… |
CVE-2025-20926 | Medium | 5.5 | 2025-03-06 | Improper export of Android application components in My Files prior to version 15.0.07.5 in Android 14 allows local attackers to access files with My Files' pr… |
CVE-2025-1923 | Medium | 4.3 | 2025-03-05 | Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious exte… |
CVE-2025-1922 | Medium | 4.3 | 2025-03-05 | Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specif… |
CVE-2025-1921 | Medium | 6.5 | 2025-03-05 | Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a c… |
CVE-2025-1919 | High | 8.8 | 2025-03-05 | Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2025-1918 | High | 8.8 | 2025-03-05 | Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted… |
CVE-2025-1917 | Medium | 4.3 | 2025-03-05 | Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HT… |
CVE-2025-1916 | High | 8.8 | 2025-03-05 | Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exp… |
CVE-2025-1915 | High | 8.1 | 2025-03-05 | Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a… |
CVE-2025-1914 | High | 8.8 | 2025-03-05 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr… |
CVE-2025-20653 | Medium | 6.5 | 2025-03-03 | In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access t… |
CVE-2025-20652 | Medium | 4.6 | 2025-03-03 | In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical ac… |
CVE-2025-20651 | Medium | 4.1 | 2025-03-03 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20650 | Medium | 6.8 | 2025-03-03 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20648 | Medium | 5.5 | 2025-03-03 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution priv… |
CVE-2025-20645 | High | 7.8 | 2025-03-03 | In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has… |
CVE-2024-39441 | High | 7.1 | 2025-02-26 | In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. |
CVE-2025-1426 | High | 8.8 | 2025-02-19 | Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted… |
CVE-2025-1006 | High | 8.8 | 2025-02-19 | Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chr… |
CVE-2025-0999 | High | 8.8 | 2025-02-19 | Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… |
CVE-2025-0997 | High | 8.1 | 2025-02-15 | Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exte… |
CVE-2025-0996 | Medium | 5.4 | 2025-02-15 | Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (U… |
CVE-2025-0995 | High | 8.8 | 2025-02-15 | Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-0982 | Critical | 10.0 | 2025-02-06 | Sandbox escape in the JavaScript Task feature of Google Cloud Application Integration allows an actor to execute arbitrary unsandboxed code via crafted JavaScr… |
CVE-2025-0451 | Medium | 6.3 | 2025-02-04 | Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI… |
CVE-2025-0445 | Medium | 5.4 | 2025-02-04 | Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2025-0444 | Medium | 6.3 | 2025-02-04 | Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom… |
CVE-2025-24959 | | 2025-02-03 | zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.en… | |
CVE-2025-20643 | Low | 3.9 | 2025-02-03 | In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20642 | Medium | 6.6 | 2025-02-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20641 | Medium | 6.6 | 2025-02-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20640 | Medium | 4.3 | 2025-02-03 | In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical acces… |
CVE-2025-20639 | Medium | 6.6 | 2025-02-03 | In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical acc… |
CVE-2025-20638 | Medium | 4.3 | 2025-02-03 | In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physi… |
CVE-2025-20636 | Medium | 6.7 | 2025-02-03 | In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alr… |
CVE-2025-20635 | Medium | 6.6 | 2025-02-03 | In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20147 | Medium | 5.3 | 2025-02-03 | In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional exe… |
CVE-2024-20142 | Medium | 6.6 | 2025-02-03 | In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-20141 | Medium | 6.6 | 2025-02-03 | In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical… |
CVE-2024-10604 | Medium | 5.3 | 2025-01-30 | Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports… |
CVE-2024-10603 | Medium | 5.3 | 2025-01-30 | Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in so… |
CVE-2024-10026 | Medium | 5.3 | 2025-01-30 | A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot ident… |
CVE-2025-0762 | High | 8.8 | 2025-01-29 | Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Exten… |
CVE-2024-40677 | High | 8.4 | 2025-01-28 | In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. Thi… |
CVE-2024-40676 | High | 7.7 | 2025-01-28 | In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. T… |
CVE-2024-40675 | High | 7.5 | 2025-01-28 | In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no addi… |
CVE-2024-40674 | Medium | 5.3 | 2025-01-28 | In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lea… |
CVE-2024-40673 | Medium | 6.5 | 2025-01-28 | In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validat… |
CVE-2024-40672 | High | 8.4 | 2025-01-28 | In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local es… |
CVE-2024-40670 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privil… |
CVE-2024-40669 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privil… |
CVE-2024-40651 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no addi… |
CVE-2024-40649 | High | 8.4 | 2025-01-28 | In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no addi… |
CVE-2024-34748 | High | 8.4 | 2025-01-28 | In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of pri… |
CVE-2024-34733 | High | 8.4 | 2025-01-28 | In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of pr… |
CVE-2024-34732 | High | 8.4 | 2025-01-28 | In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in… |
CVE-2018-9378 | Medium | 6.2 | 2025-01-28 | In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local… |
CVE-2018-9373 | High | 8.8 | 2025-01-28 | In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of p… |
CVE-2017-13318 | Medium | 5.7 | 2025-01-28 | In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disc… |
CVE-2017-13317 | Medium | 5.7 | 2025-01-28 | In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote info… |
CVE-2023-38009 | Medium | 4.2 | 2025-01-26 | IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning. |
CVE-2025-0612 | High | 7.5 | 2025-01-22 | Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-0611 | High | 8.2 | 2025-01-22 | Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2024-49749 | High | 8.8 | 2025-01-21 | In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional exe… |
CVE-2024-49748 | Critical | 9.8 | 2025-01-21 | In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execu… |
CVE-2024-49747 | Critical | 9.8 | 2025-01-21 | In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execu… |
CVE-2024-49745 | High | 7.8 | 2025-01-21 | In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no a… |
CVE-2024-49744 | High | 7.8 | 2025-01-21 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization… |
CVE-2024-49742 | High | 7.8 | 2025-01-21 | In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permi… |
CVE-2024-49738 | High | 7.8 | 2025-01-21 | In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privilege… |
CVE-2024-49737 | High | 7.8 | 2025-01-21 | In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error… |
CVE-2024-49736 | Medium | 5.5 | 2025-01-21 | In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead… |
CVE-2024-49735 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege… |
CVE-2024-49734 | High | 7.5 | 2025-01-21 | In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to… |
CVE-2024-49733 | Medium | 5.5 | 2025-01-21 | In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could l… |
CVE-2024-49732 | High | 7.8 | 2025-01-21 | In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission chec… |
CVE-2024-49724 | High | 7.0 | 2025-01-21 | In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. Thi… |
CVE-2024-43771 | High | 8.8 | 2025-01-21 | In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) c… |
CVE-2024-43770 | High | 8.8 | 2025-01-21 | In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent)… |
CVE-2024-43765 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of privileg… |
CVE-2024-43763 | Medium | 6.5 | 2025-01-21 | In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/adjacent) de… |
CVE-2024-43096 | High | 8.8 | 2025-01-21 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) cod… |
CVE-2024-43095 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privile… |