Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0114In Modem, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2026-0113In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2026-0112In vpu_open_inst of vpu_ioctl.c, there is a possible use after free due to a race condition.
- CVE-2026-0111In ns_GetUserData of ns_SmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2026-0110In MM_DATA_IND of cn_NrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption.
- CVE-2026-0109In dhd_tcpdata_info_get of dhd_ip.c, there is a possible Denial of Service due to a precondition check failure.
- CVE-2026-0108The register protection of the PowerVR GPU is incorrectly configured.
- CVE-2026-0107In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy.
- CVE-2025-36920In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation.
- CVE-2025-48611In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check.
- CVE-2026-3545Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandb
- CVE-2026-3544Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory writ
- CVE-2026-3543Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds m
- CVE-2026-3542Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memo
- CVE-2026-3541Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory re
- CVE-2026-3540Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory
- CVE-2026-3538Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory acce
- CVE-2026-3537Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap
- CVE-2026-3536Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory acc
- CVE-2025-48636In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error.
- CVE-2024-31328In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on th
- CVE-2026-0047In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permis
- CVE-2026-0038In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code.
- CVE-2026-0037In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code.
- CVE-2026-0035In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic er
- CVE-2026-0034In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation.
- CVE-2026-0032In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code.
- CVE-2026-0031In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2026-0030In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2026-0029In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code.