Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-10604Identifiable Header Values In Fuchsia Leading To Tracking of The User
- CVE-2024-10603Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an exte
- CVE-2024-10026Improved Seeding and Hashing In gVisor
- CVE-2025-0762Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a c
- CVE-2024-40677In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing pe
- CVE-2024-40676In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a
- CVE-2024-40675In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation.
- CVE-2024-40674In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the c
- CVE-2024-40673In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to imp
- CVE-2024-40672In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check.
- CVE-2024-40670In TBD of TBD, there is a possible use after free due to a race condition.
- CVE-2024-40669In TBD of TBD, there is a possible use after free due to a race condition.
- CVE-2024-40651In TBD of TBD, there is a possible use-after-free due to a logic error in the code.
- CVE-2024-40649In TBD of TBD, there is a possible use-after-free due to a logic error in the code.
- CVE-2024-34748In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting.
- CVE-2024-34733In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow.
- CVE-2024-34732In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition.
- CVE-2018-9378In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data.
- CVE-2018-9373In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check.
- CVE-2017-13318In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow.
- CVE-2017-13317In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation.
- CVE-2025-0612Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption
- CVE-2025-0611Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a craf
- CVE-2024-49749In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2024-49748In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-49747In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code.
- CVE-2024-49745In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2024-49744In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsa
- CVE-2024-49742In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due
- CVE-2024-49738In writeInplace of Parcel.cpp, there is a possible out of bounds write.