← Back

Google

google

14,353 CVEs • 239 products

Products (239)

Click to collapse
Toggle
Android
android
Chrome
chrome
Tensorflow
tensorflow
Chrome Os
chrome_os
V8
v8
Asylo
asylo
Blink
blink
Picasa
picasa
Sketchup
sketchup
Tunnelblick
tunnelblick
Gvisor
gvisor
Toolbar
toolbar
Web Toolkit
web_toolkit
Protobuf
protobuf
Rendertron
rendertron
Fuchsia
fuchsia
Protobuf Java
protobuf-java
Earth
earth
Fscrypt
fscrypt
Gerrit
gerrit
Android Sdk
android_sdk
Guava
guava
Monorail
monorail
Guest Oslogin
guest-oslogin
Web Designer
web_designer
Talk
talk
Desktop
desktop
Bionic
bionic
Mod Pagespeed
mod_pagespeed
Home Firmware
home_firmware
Flatbuffers
flatbuffers
Bazel
bazel
Web Stories
web_stories
Updater
updater
Nearby
nearby
Api Search
api_search
Matter
matter
Kml
kml
Google Apps
google_apps
Gears
gears
Idapython
idapython
Admob
admob
Checkout Php
checkout-php
Cityhash
cityhash
Chrome Frame
chrome_frame
Authenticator
authenticator
Glass
glass
Android Api
android_api
Email
email
Android One
android_one
Sfntly
sfntly
Skia
skia
Pdfium
pdfium
Gmail
gmail
Santa
santa
Boringssl
boringssl
Cardboard
cardboard
Snappy
snappy
Api C++ Client
api_c++_client
Voice Builder
voice_builder
Gizmo5
gizmo5
Native Client
native_client
Openthread
openthread

CVEs (14,353)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical)
1Google
1Chrome
Jun 17, 2026
Mar 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
1Google
1Clasp
Jun 17, 2026
Mar 13, 2026
8.7 HIGH· v4
8.8 HIGH· v3
N/A· v2
Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequ...Show more
Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially crafted filenames with directory traversal sequences.Show less
1Google
1Chrome
Jun 17, 2026
Mar 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium securit...Show more
Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)Show less
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Mar 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)