Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-26438In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to Incorrect implementatio
- CVE-2025-26436In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the backgro
- CVE-2025-26435In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary user
- CVE-2025-26430In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the code.
- CVE-2025-26429In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation.
- CVE-2025-26428In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code.
- CVE-2025-26427In multiple locations, there is a possible Android/data access due to a path traversal error.
- CVE-2025-26426In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant for the "android" pack
- CVE-2025-26425In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code.
- CVE-2025-26424In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code.
- CVE-2025-26423In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check.
- CVE-2025-26422In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing…
- CVE-2025-26421In multiple locations, there is a possible lock screen bypass due to a logic error in the code.
- CVE-2025-26420In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission du
- CVE-2025-22425In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation.
- CVE-2025-0087In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check.
- CVE-2025-0077In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition.
- CVE-2024-49739In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation.
- CVE-2023-35657In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion.
- CVE-2025-36887In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2024-56190In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation.
- CVE-2024-56189In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2025-36909Information disclosure
- CVE-2025-36908In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2025-36907In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2025-36906In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2025-36905In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code.
- CVE-2025-36904WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.
- CVE-2025-36903In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation.
- CVE-2025-36902In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow.