Google Desktop vulnerabilities

2 CVEs affecting Google Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3150, published 2007-06-11.

More from Google.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-1085, published 2007-02-23. High severity, CVSS 7.6. EPSS: 11.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML, and possibly gain full access to the system,…
• CVE-2007-3150, published 2007-06-11. High severity, CVSS 9.3. EPSS: 1.2% chance of exploitation in the next 30 days. Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that injects JavaScript, a www.google.com search IFRAME, and a META…