Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0074In getPreferredSize of LauncherProcessImageListener.kt, there is a possible denial of service due to resource exhaustion.
- CVE-2026-0070In multiple functions of DevicePolicyManagerService.java, there is a possible way to hide a system critical package due to improper input va
- CVE-2026-0069In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion.
- CVE-2026-0067In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a permanent denial of service due to a logic error in
- CVE-2026-0061In multiple functions of WindowState.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay a
- CVE-2026-0060In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, there is a possible persistent dos issue due to an unusual root ca
- CVE-2026-0059In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow.
- CVE-2026-0056In setTo of ResourceTypes.cpp, there is a possible read out of bounds due to an incorrect bounds check.
- CVE-2026-0055In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid dir
- CVE-2026-0052In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.
- CVE-2026-0051In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a system crash due to improper input validation.
- CVE-2026-0050In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass.
- CVE-2026-0048In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack.
- CVE-2026-0046In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attac
- CVE-2026-0045In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a logic error in the code.
- CVE-2026-0044In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause the system to crash due to an integer overflow.
- CVE-2026-0043In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.
- CVE-2026-0042In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to resource exhaustion.
- CVE-2026-0041In multiple functions of ubsan_throwing_runtime.cpp, there is a possible UBSan failure due to an integer overflow.
- CVE-2026-0040In multiple functions of ubsan_throwing_runtime.cpp, there is a possible way to cause a crash due to an integer overflow.
- CVE-2026-0039In multiple functions of ubsan_throwing_runtime.cpp, there is a possible persistent denial of service due to an integer overflow.
- CVE-2026-0036In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.
- CVE-2026-0018In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation
- CVE-2026-0016In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a pe
- CVE-2026-0009In multiple locations, there is a possible tapjacking due to a logic error in the code.
- CVE-2025-48652In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code.
- CVE-2025-48649In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions bypass.
- CVE-2025-48648In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion.
- CVE-2025-48616In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic erro
- CVE-2025-48595In multiple locations, there is a possible way to achieve code execution due to an integer overflow.