Google

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-13236 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed f...Show more In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217699.Show less
CVE-2017-13235 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866.
CVE-2017-13234 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no additional execution privileges needed. User interaction is n...Show more In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68159767.Show less
CVE-2017-13233 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is neede...Show more In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62851602.Show less
CVE-2017-13232 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local information disclosure with no additional execution privileges neede...Show more In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL terminated. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68953950.Show less
CVE-2017-13231 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploi...Show more In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232.Show less
CVE-2017-13230 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote escalation of privilege with no additional execution privileges neede...Show more In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65483665.Show less
CVE-2017-13229 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68160703.
CVE-2017-13228 1Google 1Android Nov 21, 2024 Feb 12, 2018 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges ne...Show more In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.Show less
CVE-2017-5133 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
CVE-2017-5132 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
CVE-2017-5131 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
CVE-2017-5130 3Debian GoogleXmlsoft 3Chrome Debian LinuxLibxml2 Dec 3, 2025 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
CVE-2017-5129 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2017-5128 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
CVE-2017-5127 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2017-5126 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2017-5125 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2017-5124 2Debian Google 2Chrome Debian Linux Nov 21, 2024 Feb 7, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
CVE-2017-15400 1Google 1Chrome Os Nov 21, 2024 Feb 7, 2018 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer z...Show more Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.Show less

Previous 1...523524525...688 Next