Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-3843Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a cra
- CVE-2024-3841Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML
- CVE-2024-3840Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation res
- CVE-2024-3839Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information fr
- CVE-2024-3838Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malic
- CVE-2024-3837Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potenti
- CVE-2024-3834Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a c
- CVE-2024-3833Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption
- CVE-2024-3832Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a cra
- CVE-2024-3515Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a craft
- CVE-2024-3516Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via
- CVE-2024-3157Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU pr
- CVE-2024-3159Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a c
- CVE-2024-3158Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a
- CVE-2024-3156Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds m
- CVE-2024-29783In tmu_get_tr_thresholds, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-29782In tmu_get_tr_num_thresholds of tmu.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-29757there is a possible permission bypass due to Debug certs being allowlisted.
- CVE-2024-29756In afe_callback of q6afe.c, there is a possible out of bounds write due to a buffer overflow.
- CVE-2024-29755In tmu_get_pi of tmu.c, there is a possible out of bounds read due to improper input validation.
- CVE-2024-29754In TMU_IPC_GET_TABLE, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-29753In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-29752In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-29751In asn1_ec_pkey_parse_p384 of asn1_common.c, there is a possible OOB Read due to a missing null check.
- CVE-2024-29750In km_exp_did_inner of kmv.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-29749In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-29748there is a possible way to bypass due to a logic error in the code.
- CVE-2024-29747In _dvfs_get_lv of dvfs.c, there is a possible out of bounds read due to a missing null check.
- CVE-2024-29746In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation.
- CVE-2024-29745there is a possible Information Disclosure due to uninitialized data.