Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-25984In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow.
- CVE-2024-22011In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-22010In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-22009In init_data of , there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-22008In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-22007In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-22006OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
- CVE-2024-22005there is a possible Authentication Bypass due to improperly used crypto.
- CVE-2024-23717In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validati
- CVE-2024-0053In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy.
- CVE-2024-0052In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check.
- CVE-2024-0051In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-0050In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check.
- CVE-2024-0049In multiple locations, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-0048In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of nu
- CVE-2024-0047In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code.
- CVE-2024-0046In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the cod
- CVE-2024-0045In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation.
- CVE-2024-0044In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.
- CVE-2024-0039In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check.
- CVE-2024-2176Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a craf
- CVE-2024-2174Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption
- CVE-2024-2173Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access
- CVE-2024-1939Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted
- CVE-2024-1938Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafte
- CVE-2024-1676Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a craf
- CVE-2024-1675Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restricti
- CVE-2024-1674Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictio
- CVE-2024-1673Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process t
- CVE-2024-1672Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content