← Back

Google

google

15,575 CVEs • 241 products

Products (241)

Click to collapse
Toggle
Android
android
Chrome
chrome
Tensorflow
tensorflow
Chrome Os
chrome_os
V8
v8
Asylo
asylo
Blink
blink
Picasa
picasa
Sketchup
sketchup
Tunnelblick
tunnelblick
Gvisor
gvisor
Toolbar
toolbar
Web Toolkit
web_toolkit
Protobuf
protobuf
Rendertron
rendertron
Fuchsia
fuchsia
Protobuf Java
protobuf-java
Earth
earth
Fscrypt
fscrypt
Gerrit
gerrit
Android Sdk
android_sdk
Guava
guava
Monorail
monorail
Guest Oslogin
guest-oslogin
Web Designer
web_designer
Talk
talk
Desktop
desktop
Bionic
bionic
Mod Pagespeed
mod_pagespeed
Home Firmware
home_firmware
Tink Java
tink_java
Flatbuffers
flatbuffers
Bazel
bazel
Web Stories
web_stories
Updater
updater
Nearby
nearby
Android Xr
android_xr
Api Search
api_search
Matter
matter
Kml
kml
Google Apps
google_apps
Gears
gears
Idapython
idapython
Admob
admob
Checkout Php
checkout-php
Cityhash
cityhash
Chrome Frame
chrome_frame
Authenticator
authenticator
Glass
glass
Android Api
android_api
Email
email
Android One
android_one
Sfntly
sfntly
Skia
skia
Pdfium
pdfium
Gmail
gmail
Santa
santa
Boringssl
boringssl
Cardboard
cardboard
Snappy
snappy
Api C++ Client
api_c++_client
Voice Builder
voice_builder

CVEs (15,575)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for expl...Show more
In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617.Show less
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not neede...Show more
In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362999; Issue ID: MSV-5625.Show less
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not n...Show more
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362725; Issue ID: MSV-5694.Show less
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is no...Show more
In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5733.Show less
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed f...Show more
In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10351676; Issue ID: MSV-5737.Show less
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
6.7 MEDIUM· v3
N/A· v2
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not n...Show more
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362552; Issue ID: MSV-5760.Show less
1Google
1Android
Jun 17, 2026
Feb 2, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not n...Show more
In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363246; Issue ID: MSV-5779.Show less
1Google
1Chrome
Jun 17, 2026
Jan 27, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Protobuf
Sep 1, 2026
Jan 23, 2026
8.2 HIGH· v4
7.5 HIGH· v3
N/A· v2
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing r...Show more
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.Show less
1Google
1Sentencepiece
Jul 15, 2026
Jan 22, 2026
8.5 HIGH· v4
7.8 HIGH· v3
N/A· v2
Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromi...Show more
Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Jan 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)