CVE-2017-9245: Google News And Weather

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL.

Affected products

• Google News And Weather: before 3.3.1 (fixed in 3.3.1)

Published 2017-07-19. Last modified 2026-06-17.