Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-4761Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a
- CVE-2024-4671Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to pot
- CVE-2024-23709In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-23708In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has b
- CVE-2024-23707In multiple locations, there is a possible permissions bypass due to improper input validation.
- CVE-2024-23706In multiple locations, there is a possible bypass of health data permissions due to an improper input validation.
- CVE-2024-23705In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation.
- CVE-2024-0043In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a logic error in the cod
- CVE-2024-0025In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error.
- CVE-2024-0024In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due to improper input va
- CVE-2024-23713In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications settings due to improp
- CVE-2024-23712In multiple functions of AppOpsService.java, there is a possible way to saturate the content of /data/system/appops_accesses.xml due to reso
- CVE-2024-23710In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary app code as a privileg
- CVE-2024-23704In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permissi
- CVE-2024-0042In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto.
- CVE-2024-0027In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion.
- CVE-2024-0026In multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due to resource exhaustion.
- CVE-2024-0022In multiple functions of CompanionDeviceManagerService.java, there is a possible launch NotificationAccessConfirmationActivity of another us
- CVE-2024-4559Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption v
- CVE-2024-4558Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a craf
- CVE-2024-4368Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a craft
- CVE-2024-4331Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corrupti
- CVE-2024-4060Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafte
- CVE-2024-4059Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML pa
- CVE-2024-4058Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a craft
- CVE-2024-3914Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2024-3847Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy
- CVE-2024-3846Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in
- CVE-2024-3845Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy vi
- CVE-2024-3844Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a cr