Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-32324In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy.
- CVE-2025-32323In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission pop
- CVE-2025-32321In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy.
- CVE-2025-26464In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code.
- CVE-2025-26454In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confused
- CVE-2025-0089In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code.
- CVE-2025-0076In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check.
- CVE-2024-49714In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2025-48533In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition.
- CVE-2025-48530In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check.
- CVE-2025-22441In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privile
- CVE-2025-32312In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified data to be passed to
- CVE-2025-26463In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages.
- CVE-2025-26462In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code.
- CVE-2025-26458In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code.
- CVE-2025-26456In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code.
- CVE-2025-26455In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2025-26453In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code.
- CVE-2025-26452In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy.
- CVE-2025-26450In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the defa
- CVE-2025-26449In multiple locations, there is a possible permanent denial of service due to resource exhaustion.
- CVE-2025-26448In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data.
- CVE-2025-26445In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check.
- CVE-2025-26443In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unknown sources due to
- CVE-2025-26441In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check.
- CVE-2025-26437In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing
- CVE-2025-26432In multiple locations, there is a possible way to persistently DoS the device due to a missing length check.
- CVE-2025-26444In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default
- CVE-2025-26442In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due t
- CVE-2025-26440In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permissions bypass.