Server-Side Request Forgery

Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Web Stories <= 1.24.0 - Server Side Request ForgeryCVE-2022-3708google · CVSS 9.6 · 1.1% likely

   CWE-918

2. In WindowManager, there is a possible launch of an unexpected app due to a confused deputy. This could lead to local escalation of privilege due to launching a malicious app inste…CVE-2020-0267Google · 0.5% likely

   CWE-610

3. Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially…CVE-2026-79256Google · CVSS 8.3 · 0.4% likely

   CWE-610

4. Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cr…CVE-2026-87595Google · CVSS 9.8 · 0.4% likely

   CWE-918

5. In sendReplyIntentToReceiver of BluetoothPermissionActivity.java, there is a possible way to invoke privileged broadcast receivers due to a confused deputy. This could lead to loc…CVE-2021-0591Google · 0.4% likely

   CWE-610

6. In SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges neede…CVE-2021-39787Google · 0.4% likely

   CWE-610

7. Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security s…CVE-2026-78966Google · CVSS 4.3 · 0.3% likely

   CWE-610

8. In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could l…CVE-2025-26417Google · CVSS 4 · 0.3% likely

   CWE-610

9. Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restri…CVE-2026-93384Google · CVSS 3.7 · 0.2% likely

   CWE-918

10. In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional…CVE-2023-21097Google · CVSS 7.8 · 0.2% likely

    CWE-610

11. Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page ToolCVE-2026-16481Google · CVSS 6 · 0.2% likely

    CWE-918

12. In DocumentsUI, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. Us…CVE-2020-0345Google · 0.2% likely

    CWE-610

13. In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This could lead to local escalation of privilege with User execut…CVE-2020-0210Google · 0.2% likely

    CWE-610

14. In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to…CVE-2022-20223Google · 0.2% likely

    CWE-610

15. In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to lo…CVE-2022-20515Google · CVSS 5.5 · 0.2% likely

    CWE-610

16. Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions…CVE-2026-95376Google · CVSS 8 · 0.2% likely

    CWE-610

17. In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth…CVE-2021-39626Google · 0.2% likely

    CWE-610

18. In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local escalation o…CVE-2021-39663Google · 0.1% likely

    CWE-610

19. In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no…CVE-2021-0708Google · 0.1% likely

    CWE-610

20. Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP ToolboxCVE-2026-14540Google · CVSS 8 · 0.1% likely

    CWE-918

21. In onActivityViewReady of DetailDialog.kt, there is a possible Intent Redirect due to a confused deputy. This could lead to local escalation of privilege that allows actions perfo…CVE-2021-39668Google · 0.1% likely

    CWE-610

22. In scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a sensitive identifier via broadcasted intent due to a confused deputy. This could lead to l…CVE-2021-0599Google · 0.1% likely

    CWE-610

23. In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User executi…CVE-2022-20550Google · CVSS 7.8 · 0.1% likely

    CWE-610

24. In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with User execution privileges needed. User interaction…CVE-2021-39765Google · 0.1% likely

    CWE-610

25. In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. This could lead to local escalation of pr…CVE-2021-39707Google · 0.1% likely

    CWE-610

26. In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. This could lead to local escalation of privilege with no additi…CVE-2021-39703Google · 0.1% likely

    CWE-610

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.