Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-49737In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID du
- CVE-2024-49736In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the cod
- CVE-2024-49735In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion.
- CVE-2024-49734In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to t
- CVE-2024-49733In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the
- CVE-2024-49732In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a miss
- CVE-2024-49724In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a
- CVE-2024-43771In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-43770In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-43765In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack.
- CVE-2024-43763In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code.
- CVE-2024-43096In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-43095In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code.
- CVE-2024-34730In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code.
- CVE-2023-40132In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missin
- CVE-2023-40108In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check.
- CVE-2018-9405In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check.
- CVE-2018-9401In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check.
- CVE-2018-9406In NlpService, there is a possible way to obtain location information due to a missing permission check.
- CVE-2018-9389In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow.
- CVE-2018-9387In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow.
- CVE-2018-9464In multiple locations, there is a possible way to read protected files due to a missing permission check.
- CVE-2018-9461In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race conditio
- CVE-2018-9447In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null chec
- CVE-2018-9434In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization.
- CVE-2018-9382In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing p
- CVE-2018-9379In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy.
- CVE-2018-9375In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confus
- CVE-2017-13322In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error
- CVE-2018-9384In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause.