Google

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-0653 1Google 1Android Jun 17, 2026 Dec 15, 2021 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional...Show more In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-177931370Show less
CVE-2021-0650 1Google 1Android Jun 17, 2026 Dec 15, 2021 N/A· v4 6.5 MEDIUM· v3 7.1 HIGH· v2 In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User in...Show more In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-190286685Show less
CVE-2021-0649 1Google 1Android Jun 17, 2026 Dec 15, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. Use...Show more In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-191382886Show less
CVE-2021-0434 1Google 1Android Jun 17, 2026 Dec 15, 2021 N/A· v4 7.3 HIGH· v3 6.9 MEDIUM· v2 In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dia...Show more In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-167403112Show less
CVE-2021-22565 1Google 1Exposure Notification Verification Server Jun 17, 2026 Dec 9, 2021 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading the Exposure Notifica...Show more An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading the Exposure Notification server to V1.1.2 or greater.Show less
CVE-2021-25519 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission.
CVE-2021-25518 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.
CVE-2021-25517 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.
CVE-2021-25516 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations.
CVE-2021-25515 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID.
CVE-2021-25514 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.
CVE-2021-25513 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 2.4 LOW· v3 2.1 LOW· v2 An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen.
CVE-2021-25512 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities.
CVE-2021-25511 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability.
CVE-2021-25510 1Google 1Android Jun 17, 2026 Dec 8, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution.
CVE-2021-38004 2Debian Google 2Chrome Debian Linux Jun 17, 2026 Nov 23, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-38003 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Nov 23, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-38002 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Nov 23, 2021 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-38001 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Nov 23, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-38000 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Nov 23, 2021 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

Previous 1...449450451...807 Next