Google CVEs
9,110 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-9383In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2025-0448Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a c
- CVE-2025-0447Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation
- CVE-2025-0446Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage
- CVE-2025-0443Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage
- CVE-2025-0442Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in
- CVE-2025-0441Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensit
- CVE-2025-0440Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofi
- CVE-2025-0439Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to p
- CVE-2025-0438Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption v
- CVE-2025-0437Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a
- CVE-2025-0436Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a craf
- CVE-2025-0435Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofi
- CVE-2025-0434Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption v
- CVE-2025-0291Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra
- CVE-2023-35685In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code.
- CVE-2024-53842In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-53841In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy.
- CVE-2024-53840there is a possible biometric bypass due to an unusual root cause.
- CVE-2024-53839In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-53838In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds c
- CVE-2024-53837In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2024-53836In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow.
- CVE-2024-53835there is a possible biometric bypass due to an unusual root cause.
- CVE-2024-53834In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bounds check.
- CVE-2024-53833In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation.
- CVE-2024-47032In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-11624there is a possible to add apps to bypass VPN due to Undeclared Permission .
- CVE-2024-43769In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due
- CVE-2024-43768In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow.