Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36901WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.
- CVE-2025-36900In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow.
- CVE-2025-36899There is a possible escalation of privilege due to test/debugging code left in a production build.
- CVE-2025-36898There is a possible escalation of privilege due to a logic error in the code.
- CVE-2025-36897In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check.
- CVE-2025-36896WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.
- CVE-2025-36895Information disclosure
- CVE-2025-36894In TBD of TBD, there is a possible DoS due to a missing null check.
- CVE-2025-36893In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data.
- CVE-2025-36892Denial of service
- CVE-2025-36891Elevation of privilege
- CVE-2025-36890Elevation of Privilege
- CVE-2025-9867Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofin
- CVE-2025-9866Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security poli
- CVE-2025-9865Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to
- CVE-2025-26416In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2025-22442In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly…
- CVE-2025-22439In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps due to a missing per
- CVE-2025-22438In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free.
- CVE-2025-22437In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in
- CVE-2025-22435In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion.
- CVE-2025-22434In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the code.
- CVE-2025-22433In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commonly used in Work Prof
- CVE-2025-22431In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due
- CVE-2025-22430In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check.
- CVE-2025-22429In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code.
- CVE-2025-22428In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on the secondary user fr
- CVE-2025-22427In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due t
- CVE-2025-22423In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check.
- CVE-2025-22422In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app when its result will be