Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-58944In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a…
- CVE-2026-58943In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy.
- CVE-2026-58942In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code.
- CVE-2026-58938In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation.
- CVE-2026-58937In multiple locations, there is a possible persistent denial of service due to improper input validation.
- CVE-2026-58936In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free.
- CVE-2026-58934In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code.
- CVE-2026-58933In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code.
- CVE-2026-58886In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code.
- CVE-2026-58885In multiple locations, there is a possible permission bypass due to a confused deputy.
- CVE-2026-58884In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-58883In multiple locations, there is a possible denial of service due to a logic error in the code.
- CVE-2026-58882In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow.
- CVE-2026-58879In descramble of multiple files, there is a possible out-of-bounds write due to improper casting.
- CVE-2026-58877In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-58876In multiple locations, there is a possible memory safety issue due to a use-after-free.
- CVE-2026-58875In multiple locations, there is a possible denial of service due to improper input validation.
- CVE-2026-58871In set_type4_frame_classifier of sta_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow.
- CVE-2026-58870In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58868In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow.
- CVE-2026-58867In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check.
- CVE-2026-58866In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing…
- CVE-2026-58857In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition.
- CVE-2026-58853In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check.
- CVE-2026-58847In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the code.
- CVE-2026-58845In multiple locations, there is a possible out of bounds write due to an integer overflow.
- CVE-2026-58844In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check.
- CVE-2026-58838In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation.
- CVE-2026-58837In multiple locations, there is a possible background activity launch due to a logic error in the code.
- CVE-2026-58836In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that…