Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-31332In multiple locations, there is a possible way to bypass a restriction on adding new Wi-Fi connections due to a missing permission check.
- CVE-2024-31331In setMimeGroup of PackageManagerService.java, there is a possible way to hide the service from Settings due to a logic error in the code.
- CVE-2024-31320In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation d
- CVE-2024-31327In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition.
- CVE-2024-31326In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code.
- CVE-2024-31325In multiple locations, there is a possible way to reveal images across users data due to a logic error in the code.
- CVE-2024-31324In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode firs
- CVE-2024-31323In onCreate of multiple files, there is a possible way to trick the user into granting health permissions due to tapjacking.
- CVE-2024-31322In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retainin
- CVE-2024-31319In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a con
- CVE-2024-31318In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permissio
- CVE-2024-31317In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to u
- CVE-2024-31316In onResult of AccountManagerService.java, there is a possible way to perform an arbitrary background activity launch due to parcel mismatch
- CVE-2024-31315In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notificat
- CVE-2024-31314In multiple functions of ShortcutService.java, there is a possible persistent DOS due to resource exhaustion.
- CVE-2024-31313In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2024-31312In multiple locations, there is a possible information leak due to a missing permission check.
- CVE-2024-31311In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-31310In newServiceInfoLocked of AutofillManagerServiceImpl.java, there is a possible way to hide an enabled Autofill service app in the Autofill
- CVE-2024-23711In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code.
- CVE-2024-23698In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check.
- CVE-2024-23697In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.
- CVE-2024-23696In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.
- CVE-2024-23695In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow.
- CVE-2023-21114In multiple locations, there is a possible permission bypass due to a confused deputy.
- CVE-2023-21113In multiple locations, there is a possible permission bypass due to a confused deputy.
- CVE-2024-6284Improper IPv4 and IPv6 byte order storage in github.com/google/nftables
- CVE-2024-38272Auth Bypass in Quick Share
- CVE-2024-38271Denial of Service in Quick Share
- CVE-2024-6293Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a craft