Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-48543In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free.
- CVE-2025-48542In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion.
- CVE-2025-48541In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation.
- CVE-2025-48540In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code.
- CVE-2025-48539In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free.
- CVE-2025-48538In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to imprope
- CVE-2025-48537In multiple locations, there is a possible way to persistently DoS the device due to improper input validation.
- CVE-2025-48535In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a lau
- CVE-2025-48534In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code.
- CVE-2025-48532In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused depu
- CVE-2025-48531In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code.
- CVE-2025-48529In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy.
- CVE-2025-48528In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack.
- CVE-2025-48527In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code.
- CVE-2025-48526In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another…
- CVE-2025-48524In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check.
- CVE-2025-48523In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code.
- CVE-2025-48522In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code.
- CVE-2025-32350In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overla
- CVE-2025-32349In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack.
- CVE-2025-32347In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent.
- CVE-2025-32346In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy.
- CVE-2025-32345In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user
- CVE-2025-32333In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code.
- CVE-2025-32332In multiple locations, there is a possible memory corruption due to a use after free.
- CVE-2025-32331In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code.
- CVE-2025-32330In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecu
- CVE-2025-32327In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection.
- CVE-2025-32326In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy.
- CVE-2025-32325In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow.