← Back

Google

google

14,348 CVEs • 239 products

Products (239)

Click to collapse
Toggle
Android
android
Chrome
chrome
Tensorflow
tensorflow
Chrome Os
chrome_os
V8
v8
Asylo
asylo
Blink
blink
Picasa
picasa
Sketchup
sketchup
Tunnelblick
tunnelblick
Gvisor
gvisor
Toolbar
toolbar
Web Toolkit
web_toolkit
Protobuf
protobuf
Rendertron
rendertron
Fuchsia
fuchsia
Protobuf Java
protobuf-java
Earth
earth
Fscrypt
fscrypt
Gerrit
gerrit
Android Sdk
android_sdk
Guava
guava
Monorail
monorail
Guest Oslogin
guest-oslogin
Web Designer
web_designer
Talk
talk
Desktop
desktop
Bionic
bionic
Mod Pagespeed
mod_pagespeed
Home Firmware
home_firmware
Flatbuffers
flatbuffers
Bazel
bazel
Web Stories
web_stories
Updater
updater
Nearby
nearby
Api Search
api_search
Matter
matter
Kml
kml
Google Apps
google_apps
Gears
gears
Idapython
idapython
Admob
admob
Checkout Php
checkout-php
Cityhash
cityhash
Chrome Frame
chrome_frame
Authenticator
authenticator
Glass
glass
Android Api
android_api
Email
email
Android One
android_one
Sfntly
sfntly
Skia
skia
Pdfium
pdfium
Gmail
gmail
Santa
santa
Boringssl
boringssl
Cardboard
cardboard
Snappy
snappy
Api C++ Client
api_c++_client
Voice Builder
voice_builder
Gizmo5
gizmo5
Native Client
native_client
Openthread
openthread

CVEs (14,348)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vect...Show more
The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corrupt...Show more
The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
3Debian
GoogleRedhat
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handlin...Show more
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.Show less
1Google
1Chrome
Apr 29, 2026
Dec 13, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
3Acer
GoogleSamsung
4Ac700 Chromebook
Chrome OsCr 48 Chromebook+1 more
Apr 29, 2026
Dec 9, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
2Apple
Google
3Chrome
SafariWebkit
Apr 29, 2026
Dec 7, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whet...Show more
WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi.Show less
1Google
1Chrome
Apr 29, 2026
Dec 7, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a d...Show more
Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.Show less
1Google
1Chrome
Apr 29, 2026
Dec 7, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information...Show more
The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. NOTE: this may overlap CVE-2010-5070.Show less
1Google
1Chrome
Apr 29, 2026
Dec 7, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted H...Show more
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.Show less
3Acer
GoogleSamsung
4Ac700 Chromebook
Chrome OsCr 48 Chromebook+1 more
Apr 29, 2026
Nov 24, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
1Google
1Chrome
Apr 29, 2026
Nov 17, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write operation.