Page 24 of 100 — Google CVEs from a corpus of 15879, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-30792 | High | 8.1 | 2026-03-05 | A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config op… |
CVE-2026-30789 | Critical | 9.8 | 2026-03-05 | Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDes… |
CVE-2026-30783 | Critical | 9.8 | 2026-03-05 | A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Client signaling, API sync loop, config m… |
CVE-2026-30791 | High | 7.5 | 2026-03-05 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebCl… |
CVE-2026-3545 | Critical | 9.6 | 2026-03-04 | Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a cra… |
CVE-2026-3544 | High | 8.8 | 2026-03-04 | Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM… |
CVE-2026-3543 | High | 8.8 | 2026-03-04 | Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a… |
CVE-2026-3542 | High | 8.8 | 2026-03-04 | Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a cra… |
CVE-2026-3541 | High | 8.8 | 2026-03-04 | Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HT… |
CVE-2026-3540 | High | 8.8 | 2026-03-04 | Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafte… |
CVE-2026-3538 | High | 8.8 | 2026-03-04 | Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HT… |
CVE-2026-3537 | High | 8.8 | 2026-03-04 | Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a cr… |
CVE-2026-3536 | High | 8.8 | 2026-03-04 | Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted H… |
CVE-2026-3136 | Critical | 9.8 | 2026-03-03 | An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrar… |
CVE-2026-0047 | High | 8.4 | 2026-03-02 | In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check. This co… |
CVE-2026-0038 | High | 8.4 | 2026-03-02 | In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation… |
CVE-2026-0037 | High | 8.4 | 2026-03-02 | In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2026-0035 | High | 8.4 | 2026-03-02 | In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code. Th… |
CVE-2026-0034 | High | 8.4 | 2026-03-02 | In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation. This could lead to lo… |
CVE-2026-0032 | High | 7.8 | 2026-03-02 | In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privil… |
CVE-2026-0031 | High | 8.4 | 2026-03-02 | In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege wi… |
CVE-2026-0030 | High | 8.4 | 2026-03-02 | In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalatio… |
CVE-2026-0029 | High | 8.4 | 2026-03-02 | In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no a… |
CVE-2026-0028 | High | 8.4 | 2026-03-02 | In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privile… |
CVE-2026-0027 | Medium | 6.7 | 2026-03-02 | In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with Sys… |
CVE-2026-0026 | High | 7.8 | 2026-03-02 | In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code. This cou… |
CVE-2026-0025 | High | 8.4 | 2026-03-02 | In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass. This could lead to local escalation o… |
CVE-2026-0024 | Medium | 4.0 | 2026-03-02 | In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check… |
CVE-2026-0023 | High | 7.8 | 2026-03-02 | In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permission check. This co… |
CVE-2026-0021 | High | 8.4 | 2026-03-02 | In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. This could lead to loca… |
CVE-2026-0020 | High | 8.4 | 2026-03-02 | In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass. Th… |
CVE-2026-0017 | High | 7.7 | 2026-03-02 | In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could lead to local escalatio… |
CVE-2026-0015 | Medium | 6.2 | 2026-03-02 | In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial… |
CVE-2026-0014 | Medium | 6.2 | 2026-03-02 | In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local den… |
CVE-2026-0013 | High | 8.4 | 2026-03-02 | In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This could lead to local esca… |
CVE-2026-0012 | Medium | 6.2 | 2026-03-02 | In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This could lead to local inf… |
CVE-2026-0011 | High | 8.4 | 2026-03-02 | In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code. This could lead t… |
CVE-2026-0010 | High | 8.4 | 2026-03-02 | In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2026-0008 | High | 8.4 | 2026-03-02 | In multiple locations, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional… |
CVE-2026-0007 | High | 8.6 | 2026-03-02 | In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to… |
CVE-2026-0006 | Critical | 9.8 | 2026-03-02 | In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additio… |
CVE-2026-0005 | Medium | 6.2 | 2026-03-02 | In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps withou… |
CVE-2025-48654 | High | 7.8 | 2026-03-02 | In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of… |
CVE-2025-48653 | High | 7.8 | 2026-03-02 | In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code. This could lead to local escal… |
CVE-2025-48650 | High | 8.4 | 2026-03-02 | In multiple locations, there is a possible information disclosure due to SQL injection. This could lead to local escalation of privilege with no additional exe… |
CVE-2025-48646 | High | 7.8 | 2026-03-02 | In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with… |
CVE-2025-48645 | High | 7.8 | 2026-03-02 | In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation. This could lead to local escalation of pri… |
CVE-2025-48644 | Medium | 5.5 | 2026-03-02 | In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no ad… |
CVE-2025-48642 | Medium | 5.5 | 2026-03-02 | In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure… |
CVE-2025-48641 | High | 7.0 | 2026-03-02 | In multiple functions of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional… |
CVE-2025-48636 | High | 8.4 | 2026-03-02 | In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to lo… |
CVE-2025-48635 | High | 7.7 | 2026-03-02 | In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code. This could lead to loc… |
CVE-2025-48634 | High | 7.3 | 2026-03-02 | In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of pr… |
CVE-2025-48630 | High | 7.4 | 2026-03-02 | In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. This could lead to l… |
CVE-2025-48619 | High | 8.4 | 2026-03-02 | In multiple functions of ContentProvider.java, there is a possible way for an app with read-only access to truncate files due to a logic error in the code. Thi… |
CVE-2025-48613 | High | 7.8 | 2026-03-02 | In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the same key. This coul… |
CVE-2025-48609 | Critical | 9.1 | 2026-03-02 | In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a pa… |
CVE-2025-48605 | High | 8.4 | 2026-03-02 | In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation… |
CVE-2025-48602 | High | 8.4 | 2026-03-02 | In exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This… |
CVE-2025-48587 | Medium | 6.2 | 2026-03-02 | In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local den… |
CVE-2025-48585 | Medium | 6.2 | 2026-03-02 | In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local den… |
CVE-2025-48582 | High | 8.4 | 2026-03-02 | In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to loc… |
CVE-2025-48579 | High | 8.4 | 2026-03-02 | In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This could lead to local es… |
CVE-2025-48578 | High | 7.8 | 2026-03-02 | In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permission check. This co… |
CVE-2025-48577 | High | 7.4 | 2026-03-02 | In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privi… |
CVE-2025-48574 | High | 8.4 | 2026-03-02 | In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permission check. This c… |
CVE-2025-48568 | High | 7.4 | 2026-03-02 | In multiple locations, there is a possible lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execu… |
CVE-2025-48567 | High | 7.8 | 2026-03-02 | In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normaliza… |
CVE-2025-32313 | High | 8.4 | 2026-03-02 | In UsageEvents of UsageEvents.java, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… |
CVE-2024-43766 | Medium | 6.5 | 2026-03-02 | In multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote (proximal/adjac… |
CVE-2024-31328 | High | 8.8 | 2026-03-02 | In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion… |
CVE-2026-20445 | Medium | 4.4 | 2026-03-02 | In MDDP, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the Sys… |
CVE-2026-20444 | Medium | 6.7 | 2026-03-02 | In display, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alre… |
CVE-2026-20443 | Medium | 6.7 | 2026-03-02 | In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2026-20442 | Medium | 4.4 | 2026-03-02 | In display, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the Sy… |
CVE-2026-20441 | Medium | 6.7 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20440 | Medium | 6.7 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alread… |
CVE-2026-20439 | Medium | 4.4 | 2026-03-02 | In imgsys, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the Sys… |
CVE-2026-20438 | Medium | 6.4 | 2026-03-02 | In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obta… |
CVE-2026-20437 | Medium | 4.4 | 2026-03-02 | In MAE, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already obtained the System… |
CVE-2026-20435 | Medium | 4.6 | 2026-03-02 | In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has p… |
CVE-2026-20429 | Medium | 4.4 | 2026-03-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has alre… |
CVE-2026-20428 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20427 | Medium | 6.7 | 2026-03-02 | In display, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor ha… |
CVE-2026-20426 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20425 | Medium | 6.7 | 2026-03-02 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has al… |
CVE-2026-20424 | Medium | 4.4 | 2026-03-02 | In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has alre… |
CVE-2026-20416 | High | 7.2 | 2026-03-02 | In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has alrea… |
CVE-2026-3223 | High | 7.8 | 2026-02-27 | Arbitrary file write & potential privilege escalation exploiting zip slip vulnerability in Google Web Designer. |
CVE-2026-3063 | Medium | 5.4 | 2026-02-23 | Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to… |
CVE-2026-3062 | Critical | 9.8 | 2026-02-23 | Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a cra… |
CVE-2026-3061 | Critical | 9.1 | 2026-02-23 | Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page… |
CVE-2026-2650 | High | 8.8 | 2026-02-18 | Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2026-2649 | High | 8.8 | 2026-02-18 | Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2026-2648 | High | 8.8 | 2026-02-18 | Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF fi… |
CVE-2026-2441 | High | 8.8 | 2026-02-13 | Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… |
CVE-2026-1669 | High | 7.5 | 2026-02-11 | Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacke… |
CVE-2026-2323 | Medium | 4.3 | 2026-02-11 | Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Ch… |
CVE-2026-2322 | Medium | 5.4 | 2026-02-11 | Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gest… |
CVE-2026-2321 | High | 8.8 | 2026-02-11 | Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially… |