Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-48637In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2025-48633In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic
- CVE-2025-48632In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the user has disassociated
- CVE-2025-48631In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion.
- CVE-2025-48629In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an
- CVE-2025-48628In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy.
- CVE-2025-48627In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the background due to a
- CVE-2025-48626In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure.
- CVE-2025-48624In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation.
- CVE-2025-48623In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation.
- CVE-2025-48622In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow.
- CVE-2025-48621In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default.
- CVE-2025-48620In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's component name to p
- CVE-2025-48618In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking.
- CVE-2025-48615In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaustion.
- CVE-2025-48614In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due to a missing permiss
- CVE-2025-48612In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setti
- CVE-2025-48610In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in the code.
- CVE-2025-48607In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code.
- CVE-2025-48604In multiple locations, there is a possible way to read files from another user due to a missing permission check.
- CVE-2025-48603In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.
- CVE-2025-48601In multiple locations, there is a possible permanent denial of service due to improper input validation.
- CVE-2025-48600In multiple files, there is a possible way to reveal information across users due to a missing permission check.
- CVE-2025-48599In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permissio
- CVE-2025-48598In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy.
- CVE-2025-48597In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.
- CVE-2025-48596In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2025-48594In onUidImportance of DisassociationProcessor.java, there is a possible way to retain companion application privileges after disassociation
- CVE-2025-48592In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow.
- CVE-2025-48591In multiple locations, there is a possible way to read files from another user due to a missing permission check.