Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-44094In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation.
- CVE-2024-44093In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code.
- CVE-2024-44092There is a possible LCS signing enforcement missing due to test/debugging code left in a production build.
- CVE-2024-29779there is a possible escalation of privilege due to an unusual root cause.
- CVE-2024-8639Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corrupt
- CVE-2024-8638Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a craft
- CVE-2024-8637Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap cor
- CVE-2024-8636Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a
- CVE-2024-40662In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation.
- CVE-2024-40659In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feat
- CVE-2024-40658In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-40657In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused depu
- CVE-2024-40656In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused
- CVE-2024-40655In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the bac
- CVE-2024-40654In multiple locations, there is a possible permission bypass due to a confused deputy.
- CVE-2024-40652In onCreate of SettingsHomepageActivity.java, there is a possible way to access the Settings app while the device is provisioning due to a m
- CVE-2024-40650In wifi_item_edit_content of styles.xml , there is a possible FRP bypass due to Missing check for FRP state.
- CVE-2024-31336In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation.
- CVE-2024-23716In DevmemIntPFNotify of devicemem_server.c, there is a possible use-after-free due to a race condition.
- CVE-2024-8373AngularJS improper sanitization in '<source>' element
- CVE-2024-8372AngularJS improper sanitization in 'srcset' attribute
- CVE-2024-7970Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a cr
- CVE-2024-8362Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a c
- CVE-2024-8198Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to
- CVE-2024-8194Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2024-8193Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to
- CVE-2024-8035Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofi
- CVE-2024-8034Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to perform UI spoof
- CVE-2024-8033Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user
- CVE-2024-7981Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted