16940 CVEs across 342 Google products. Browse Google vulnerabilities, severities, and proof-of-concept exploits.
Google products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-13018 | Medium | 4.3 | 2026-09-28 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds mem… |
CVE-2026-87723 | | 2026-09-28 | In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writabl… | |
CVE-2026-96812 | | 2026-09-25 | Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enab… | |
CVE-2026-19202 | | 2026-09-22 | A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences… | |
CVE-2026-93387 | Medium | 4.3 | 2026-09-17 | Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chrom… |
CVE-2026-93386 | Medium | 5.4 | 2026-09-17 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via… |
CVE-2026-93385 | Medium | 6.5 | 2026-09-17 | Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium… |
CVE-2026-93384 | Low | 3.7 | 2026-09-17 | Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass… |
CVE-2026-93383 | Medium | 4.3 | 2026-09-17 | Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium… |
CVE-2026-93382 | High | 8.8 | 2026-09-17 | Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-93381 | High | 8.8 | 2026-09-17 | Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute… |
CVE-2026-93380 | Low | 3.1 | 2026-09-17 | Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social en… |
CVE-2026-93379 | Medium | 4.3 | 2026-09-17 | Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium se… |
CVE-2026-93378 | Low | 3.1 | 2026-09-17 | Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isol… |
CVE-2026-93377 | High | 8.8 | 2026-09-17 | Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandb… |
CVE-2026-93376 | Medium | 6.3 | 2026-09-17 | Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sa… |
CVE-2026-93375 | High | 8.1 | 2026-09-17 | Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code… |
CVE-2026-93374 | Critical | 9.6 | 2026-09-17 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbo… |
CVE-2026-93373 | Critical | 9.6 | 2026-09-17 | Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chro… |
CVE-2026-93372 | Critical | 9.6 | 2026-09-17 | Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-89418 | | 2026-09-17 | google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested START… | |
CVE-2026-91749 | Critical | 9.6 | 2026-09-15 | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra… |
CVE-2026-91748 | High | 8.3 | 2026-09-15 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged… |
CVE-2026-91747 | Low | 3.1 | 2026-09-15 | Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data v… |
CVE-2026-91746 | Medium | 4.3 | 2026-09-15 | Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-91745 | High | 8.8 | 2026-09-15 | Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-91744 | Medium | 5.3 | 2026-09-15 | Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and… |
CVE-2026-91743 | High | 8.3 | 2026-09-15 | Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitr… |
CVE-2026-91742 | Medium | 4.8 | 2026-09-15 | Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system acc… |
CVE-2026-91741 | High | 8.8 | 2026-09-15 | Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTM… |
CVE-2026-91740 | Medium | 4.3 | 2026-09-15 | Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium… |
CVE-2026-91739 | Medium | 4.2 | 2026-09-15 | Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to sp… |
CVE-2026-91738 | Critical | 9.6 | 2026-09-15 | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
CVE-2026-91737 | High | 8.8 | 2026-09-15 | Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-91736 | High | 8.8 | 2026-09-15 | Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-91735 | High | 8.3 | 2026-09-15 | Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially exec… |
CVE-2026-91734 | High | 7.4 | 2026-09-15 | Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox vi… |
CVE-2026-91733 | High | 8.3 | 2026-09-15 | Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory out… |
CVE-2026-91732 | High | 8.1 | 2026-09-15 | Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged s… |
CVE-2026-91731 | High | 8.8 | 2026-09-15 | Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-91730 | Low | 3.1 | 2026-09-15 | Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged soc… |
CVE-2026-91729 | Critical | 9.6 | 2026-09-15 | Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code… |
CVE-2026-91728 | Critical | 9.6 | 2026-09-15 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-91727 | High | 8.1 | 2026-09-15 | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer proces… |
CVE-2026-91726 | Medium | 4.7 | 2026-09-15 | Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HT… |
CVE-2026-91725 | Medium | 5.3 | 2026-09-15 | Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromiu… |
CVE-2026-91724 | High | 8.3 | 2026-09-15 | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbit… |
CVE-2026-91723 | Low | 3.1 | 2026-09-15 | Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium secu… |
CVE-2026-91722 | High | 8.8 | 2026-09-15 | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
CVE-2026-91721 | High | 8.8 | 2026-09-15 | Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… |
CVE-2026-91720 | Medium | 4.7 | 2026-09-15 | Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (… |
CVE-2026-91719 | High | 8.1 | 2026-09-15 | Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security… |
CVE-2026-91718 | Critical | 9.6 | 2026-09-15 | Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-91717 | Medium | 5.1 | 2026-09-15 | Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-instal… |
CVE-2026-91716 | Critical | 9.6 | 2026-09-15 | Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-91715 | High | 8.8 | 2026-09-15 | Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-91714 | Medium | 5.3 | 2026-09-15 | Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information v… |
CVE-2026-91713 | Medium | 4.2 | 2026-09-15 | Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI element… |
CVE-2026-91712 | High | 8.3 | 2026-09-15 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentiall… |
CVE-2026-91711 | High | 8.8 | 2026-09-15 | Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a craft… |
CVE-2026-91710 | Critical | 9.6 | 2026-09-15 | Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… |
CVE-2026-91709 | High | 8.8 | 2026-09-15 | Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-91708 | Low | 3.1 | 2026-09-15 | Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin dat… |
CVE-2026-58773 | Medium | 6.7 | 2026-09-15 | In link_load_gnss_image of link_device.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2026-58767 | Medium | 6.7 | 2026-09-15 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2026-58766 | High | 7.8 | 2026-09-15 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2026-58765 | Medium | 6.7 | 2026-09-15 | In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileg… |
CVE-2026-58755 | Medium | 6.7 | 2026-09-15 | In smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation… |
CVE-2026-58751 | Medium | 6.7 | 2026-09-15 | In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege w… |
CVE-2026-58747 | Medium | 6.7 | 2026-09-15 | In smmu_detach_dev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege w… |
CVE-2026-58744 | High | 7.8 | 2026-09-15 | In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no a… |
CVE-2026-58739 | Medium | 6.7 | 2026-09-15 | In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of pr… |
CVE-2026-58734 | High | 7.0 | 2026-09-15 | In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege… |
CVE-2026-58731 | Medium | 6.2 | 2026-09-15 | In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclos… |
CVE-2026-58728 | High | 7.0 | 2026-09-15 | In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-58726 | Medium | 6.7 | 2026-09-15 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with Syste… |
CVE-2026-58724 | High | 7.0 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2026-58721 | Medium | 4.4 | 2026-09-15 | In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System… |
CVE-2026-58718 | Medium | 6.7 | 2026-09-15 | In smmu_detach_dev_nested of arm-smmu-v3.c, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation o… |
CVE-2026-58716 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System e… |
CVE-2026-58710 | High | 8.8 | 2026-09-15 | In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2026-58704 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privileg… |
CVE-2026-58701 | High | 7.0 | 2026-09-15 | In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2026-58699 | High | 8.4 | 2026-09-15 | In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privi… |
CVE-2026-58698 | Medium | 6.7 | 2026-09-15 | In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege… |
CVE-2026-58695 | High | 7.8 | 2026-09-15 | In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escal… |
CVE-2026-58691 | High | 8.4 | 2026-09-15 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no add… |
CVE-2026-58683 | High | 8.8 | 2026-09-15 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no addition… |
CVE-2026-58679 | High | 8.4 | 2026-09-15 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of pri… |
CVE-2026-58678 | High | 7.8 | 2026-09-15 | In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution p… |
CVE-2026-57042 | Medium | 6.7 | 2026-09-15 | In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privile… |
CVE-2026-57035 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exec… |
CVE-2026-57014 | High | 7.8 | 2026-09-15 | In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local… |
CVE-2026-57012 | High | 8.4 | 2026-09-15 | In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no ad… |
CVE-2026-57008 | High | 7.5 | 2026-09-15 | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional exec… |
CVE-2026-57006 | Medium | 4.4 | 2026-09-15 | In acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileg… |
CVE-2026-56997 | High | 8.8 | 2026-09-15 | In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privi… |
CVE-2026-56992 | Medium | 6.7 | 2026-09-15 | In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privi… |
CVE-2026-56989 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System exec… |
CVE-2026-56988 | Medium | 6.4 | 2026-09-15 | In multiple functions of bluetooth_cco.cc, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with Sy… |