File and Path Handling

Every one of the 83 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.CVE-2017-13156Google Inc. · 20% likely

   CWE-434

2. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML…CVE-2021-21125Google · 8.7% likely

   CWE-59

3. Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.CVE-2021-21131Google · 8.2% likely

   CWE-59

4. TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is…CVE-2021-35958Google · 1.9% likely

   CWE-22

5. The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (…CVE-2013-2900Google · 1.7% likely

   CWE-22

6. In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privilege due to a path traversal error. This could lead to a remo…CVE-2018-9459Google Inc. · 1.7% likely

   CWE-22

7. Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecified impact and attack vectors.CVE-2014-1715Google · 1.7% likely

   CWE-22

8. Google Chrome before 50.0.2661.102 on Android mishandles / (slash) and \ (backslash) characters, which allows attackers to conduct directory traversal attacks via a file: URL, rel…CVE-2016-1671Google · 1.5% likely

   CWE-22

9. Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the layer parameter.CVE-2007-6212Google · 1.5% likely

   CWE-22

10. Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privile…CVE-2011-3640Google · 1.4% likely

    CWE-426

11. Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote a…CVE-2013-0895Google · 1.4% likely

    CWE-22

12. The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an…CVE-2018-6152Google · 1.3% likely

    CWE-434

13. Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process.CVE-2013-0831Google · 1.3% likely

    CWE-22

14. Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors related to databases.CVE-2013-0911Google · 1.3% likely

    CWE-22

15. Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe polic…CVE-2013-6652Google · 1.2% likely

    CWE-22

16. Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.CVE-2017-18354Google · 1.2% likely

    CWE-22

17. Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android devic…CVE-2014-7951Google · 1.1% likely

    CWE-22

18. Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offlin…CVE-2022-0799Google · 1.0% likely

    CWE-59

19. Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file.CVE-2021-37969Google · 0.9% likely

    CWE-59

20. Temp directory permission issue in GuavaCVE-2020-8908Google LLC · CVSS 3.3 · 0.9% likely

    CWE-378

21. Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the…CVE-2013-0927Google · 0.8% likely

    CWE-59

22. Directory traversal vulnerability in CrosDisks in Google Chrome OS before 33.0.1750.152 has unspecified impact and attack vectors.CVE-2014-1707Google · 0.8% likely

    CWE-22

23. In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local escalation of privilege when mounting a USB device with no…CVE-2018-9445Google Inc. · 0.8% likely

    CWE-22

24. In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user interaction requirements with no additiona…CVE-2019-9281Google · 0.8% likely

    CWE-22

25. Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a c…CVE-2022-1128Google · 0.7% likely

    CWE-22

26. Path Traversal in googleapis/mcp-toolbox HTTP Tool URL BuilderCVE-2026-11720Google · CVSS 9.3 · 0.5% likely

    CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.