← Back

Google

google

13,754 CVEs • 235 products

Products (235)

Click to collapse
Toggle
Android
android
Chrome
chrome
Tensorflow
tensorflow
Chrome Os
chrome_os
V8
v8
Asylo
asylo
Blink
blink
Picasa
picasa
Sketchup
sketchup
Tunnelblick
tunnelblick
Gvisor
gvisor
Toolbar
toolbar
Web Toolkit
web_toolkit
Protobuf
protobuf
Rendertron
rendertron
Fuchsia
fuchsia
Protobuf Java
protobuf-java
Earth
earth
Fscrypt
fscrypt
Android Sdk
android_sdk
Guava
guava
Monorail
monorail
Guest Oslogin
guest-oslogin
Gerrit
gerrit
Web Designer
web_designer
Talk
talk
Desktop
desktop
Bionic
bionic
Mod Pagespeed
mod_pagespeed
Home Firmware
home_firmware
Flatbuffers
flatbuffers
Bazel
bazel
Web Stories
web_stories
Updater
updater
Nearby
nearby
Api Search
api_search
Matter
matter
Kml
kml
Google Apps
google_apps
Gears
gears
Idapython
idapython
Admob
admob
Checkout Php
checkout-php
Cityhash
cityhash
Chrome Frame
chrome_frame
Authenticator
authenticator
Glass
glass
Android Api
android_api
Email
email
Android One
android_one
Sfntly
sfntly
Skia
skia
Pdfium
pdfium
Gmail
gmail
Santa
santa
Boringssl
boringssl
Cardboard
cardboard
Snappy
snappy
Api C++ Client
api_c++_client
Voice Builder
voice_builder
Gizmo5
gizmo5
Native Client
native_client
Openthread
openthread

CVEs (13,754)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Google
Icu Project
2Chrome
International Components For Unicode
May 13, 2026
Apr 24, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represe...Show more
The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.Show less
1Google
1Chrome
May 13, 2026
Apr 21, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.
1Google
1Android
May 13, 2026
Apr 21, 2017
N/A· v4
8.8 HIGH· v3
8.3 HIGH· v2
The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.
1Google
1Android
May 13, 2026
Apr 21, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Android allows users to cause a denial of service.
1Google
1Android
May 13, 2026
Apr 17, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.
1Google
1Android
May 13, 2026
Apr 17, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.
1Google
1Android
May 13, 2026
Apr 13, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.
1Google
1Chrome
Feb 23, 2026
Apr 13, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Google Chrome caches TLS sessions before certificate validation occurs.
1Google
1Skia
May 13, 2026
Apr 13, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash).
1Google
1Android
May 13, 2026
Apr 13, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920.
1Google
1Android
May 13, 2026
Apr 13, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921.
2Google
Linux
2Android
Linux Kernel
May 13, 2026
Apr 12, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.
1Google
1Chrome
May 13, 2026
Apr 11, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires...Show more
An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33964406.Show less
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first re...Show more
An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28470975. References: M-ALPS02696367.Show less
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first r...Show more
An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175904. References: M-ALPS02696516.Show less
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the...Show more
An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202425. References: M-ALPS02898189.Show less
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue is rated as Moderate due to the possibility of bypassing dev...Show more
An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue is rated as Moderate due to the possibility of bypassing device protection. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-30681079.Show less
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data witho...Show more
An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33897722.Show less
1Google
1Android
May 13, 2026
Apr 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data w...Show more
An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34056274.Show less