Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-58994In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58990In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible memory safety issue due to an integer overflow.
- CVE-2026-58989In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check.
- CVE-2026-58988In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2026-58986In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58985In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code.
- CVE-2026-58984In multiple locations, there is a possible memory corruption due to a use-after-free.
- CVE-2026-58979In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-58978In multiple locations, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-58976In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code.
- CVE-2026-58975In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.
- CVE-2026-58974In multiple locations, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58971In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow.
- CVE-2026-58970In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy.
- CVE-2026-58969In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58968In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free.
- CVE-2026-58966In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow.
- CVE-2026-58965In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-58964In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation.
- CVE-2026-58963In multiple locations, there is a possible denial of service due to improper input validation.
- CVE-2026-58962In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58961In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the…
- CVE-2026-58957In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy.
- CVE-2026-58956In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error in the code.
- CVE-2026-58955In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code.
- CVE-2026-58953In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow.
- CVE-2026-58951In multiple locations, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58949In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow.
- CVE-2026-58946In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-58945In multiple locations, there is a possible side channel information leak due to improperly used crypto.