Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-0028In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2026-0027In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free.
- CVE-2026-0026In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in
- CVE-2026-0025In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass.
- CVE-2026-0024In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missin
- CVE-2026-0023In createSessionInternal of PackageInstallerService.java, there is a possible way for an app to update its ownership due to a missing permis
- CVE-2026-0021In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy.
- CVE-2026-0020In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a per
- CVE-2026-0017In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code.
- CVE-2026-0015In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation.
- CVE-2026-0014In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation.
- CVE-2026-0013In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.
- CVE-2026-0012In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code.
- CVE-2026-0011In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the code
- CVE-2026-0010In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check.
- CVE-2026-0008In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy.
- CVE-2026-0007In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.
- CVE-2026-0006In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.
- CVE-2026-0005In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction wit
- CVE-2025-48654In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.
- CVE-2025-48653In loadDataAndPostValue of multiple files, there is a possible way to obscure permission usage due to a logic error in the code.
- CVE-2025-48650In multiple locations, there is a possible information disclosure due to SQL injection.
- CVE-2025-48646In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.
- CVE-2025-48645In loadDescription of DeviceAdminInfo.java, there is a possible persistent package due to improper input validation.
- CVE-2025-48644In multiple locations, there is a possible persistent denial of service due to improper input validation.
- CVE-2025-48642In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code.
- CVE-2025-48641In multiple functions of Nfc.h, there is a possible use after free due to a race condition.
- CVE-2025-48635In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code.
- CVE-2025-48634In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check.
- CVE-2025-48630In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure.