Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-1671Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security
- CVE-2024-1670Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafte
- CVE-2024-1669Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory acces
- CVE-2024-0023In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check.
- CVE-2024-0021In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to enable notification li
- CVE-2024-0020In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a
- CVE-2024-0019In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due
- CVE-2024-0018In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2024-0017In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass.
- CVE-2024-0016In multiple locations, there is a possible out of bounds read due to a missing bounds check.
- CVE-2024-0015In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection.
- CVE-2023-40085In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-21165In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free.
- CVE-2024-0041In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code.
- CVE-2024-0040In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow.
- CVE-2024-0038In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing p
- CVE-2024-0037In applyCustomDescription of SaveUi.java, there is a possible way to view images belonging to a different user due to a missing permission c
- CVE-2024-0036In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities f
- CVE-2024-0035In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to a missing null check
- CVE-2024-0034In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BAL Bypass.
- CVE-2024-0033In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow.
- CVE-2024-0032In multiple locations, there is a possible way to request access to directories that should be hidden due to improper input validation.
- CVE-2024-0031In attp_build_read_by_type_value_cmd of att_protocol.cc , there is a possible out of bounds write due to improper input validation.
- CVE-2024-0030In btif_to_bta_response of btif_gatt_util.cc, there is a possible out of bounds read due to an incorrect bounds check.
- CVE-2024-0029In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code.
- CVE-2024-0014In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error.
- CVE-2023-40122In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy.
- CVE-2023-40093In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code.
- CVE-2023-40124In multiple locations, there is a possible cross-user read due to a confused deputy.
- CVE-2023-40115In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free.