Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0139In Modem, there is a possible out of bounds write due to a missing bounds check.
- CVE-2026-0138In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption.
- CVE-2026-0137In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free.
- CVE-2026-0136In Modem, there is a possible out of bounds read due to a missing bounds check.
- CVE-2026-0135In Modem, there is a possible out of bounds read due to a missing bounds check.
- CVE-2026-0134In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code.
- CVE-2026-0133In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permissi
- CVE-2026-0132In Modem, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2026-0131In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow.
- CVE-2026-0130In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow.
- CVE-2026-0129In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check.
- CVE-2026-0128In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow.
- CVE-2026-0127In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption.
- CVE-2026-0126In WC-Radio, there is a possible out of bounds write due to a missing bounds check.
- CVE-2026-0125In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition.
- CVE-2026-11624The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DN
- CVE-2026-12035Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption
- CVE-2026-12034Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attac
- CVE-2026-12033Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to
- CVE-2026-12032Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised
- CVE-2026-12031Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the
- CVE-2026-12030Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer pr
- CVE-2026-12029Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer proce
- CVE-2026-12028Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process
- CVE-2026-12027Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer
- CVE-2026-12026Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer
- CVE-2026-12025Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised
- CVE-2026-12024Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy
- CVE-2026-12023Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to
- CVE-2026-12022Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to