Google

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-2473 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27777501.
CVE-2016-2472 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27776888.
CVE-2016-2471 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27773913.
CVE-2016-2470 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 27662174.
CVE-2016-2469 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27531992.
CVE-2016-2468 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454.
CVE-2016-2467 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm sound driver in Android before 2016-06-01 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28029010.
CVE-2016-2466 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka internal bug 27947307.
CVE-2016-2465 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27407865.
CVE-2016-2464 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corru...Show more libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726.Show less
CVE-2016-2463 1Google 1Android May 6, 2026 Jun 13, 2016 N/A· v4 8.4 HIGH· v3 7.5 HIGH· v2 Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitr...Show more Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419.Show less
CVE-2016-1703 6Canonical DebianGoogle+3 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more May 6, 2026 Jun 5, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVE-2016-1702 6Canonical DebianGoogle+3 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more May 6, 2026 Jun 5, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-b...Show more The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.Show less
CVE-2016-1701 5Debian GoogleOpensuse+2 more 8Chrome Debian LinuxEnterprise Linux Desktop+5 more May 6, 2026 Jun 5, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of ser...Show more The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.Show less
CVE-2016-1700 5Debian GoogleOpensuse+2 more 8Chrome Debian LinuxEnterprise Linux Desktop+5 more May 6, 2026 Jun 5, 2016 N/A· v4 7.5 HIGH· v3 5.1 MEDIUM· v2 extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of servic...Show more extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.Show less
CVE-2016-1699 6Canonical DebianGoogle+3 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more May 6, 2026 Jun 5, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with...Show more WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.Show less
CVE-2016-1698 5Debian GoogleOpensuse+2 more 8Chrome Debian LinuxEnterprise Linux Desktop+5 more May 6, 2026 Jun 5, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modul...Show more The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.Show less
CVE-2016-1697 6Canonical DebianGoogle+3 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more May 6, 2026 Jun 5, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which a...Show more The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.Show less
CVE-2016-1696 5Debian GoogleOpensuse+2 more 8Chrome Debian LinuxEnterprise Linux Desktop+5 more May 6, 2026 Jun 5, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
CVE-2016-1695 6Canonical DebianGoogle+3 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more May 6, 2026 Jun 5, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Previous 1...602603604...688 Next