Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-49903The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and…
- CVE-2026-59048In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check.
- CVE-2026-59047In multiple locations, there is a possible denial of service due to a logic error in the code.
- CVE-2026-59046In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible out-of-bounds write due to improper input validation.
- CVE-2026-59045In multiple locations, there is a possible memory corruption due to a race condition.
- CVE-2026-59044In multiple locations, there is a possible use-after-free due to a logic error in the code.
- CVE-2026-59043In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition.
- CVE-2026-59042In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition.
- CVE-2026-59031In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code.
- CVE-2026-59028In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-59022In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-59021In multiple locations, there is a possible denial of service due to improper input validation.
- CVE-2026-59020In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition.
- CVE-2026-59016In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal.
- CVE-2026-59015In multiple locations, there is a possible permission bypass due to a confused deputy.
- CVE-2026-59014In multiple locations, there is a possible out-of-bounds write due to an integer overflow.
- CVE-2026-59012In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission…
- CVE-2026-59011In multiple locations, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-59010In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check.
- CVE-2026-59008In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion.
- CVE-2026-59007In decode_packed_entry_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code.
- CVE-2026-59006In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.
- CVE-2026-59005In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check.
- CVE-2026-59004In multiple locations, there is a possible permission bypass due to an uncaught exception.
- CVE-2026-59003In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check.
- CVE-2026-59002In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code.
- CVE-2026-59001In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-59000In multiple locations, there is a possible permission bypass due to a confused deputy.
- CVE-2026-58997In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure.
- CVE-2026-58995In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow.