Google CVEs
9,109 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-21313In Core, there is a possible way to forward calls without user knowledge due to a missing permission check.
- CVE-2023-21312In IntentResolver, there is a possible cross-user media read due to a confused deputy.
- CVE-2023-21311In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass.
- CVE-2023-21310In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2023-21309In libcore, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-21308In Composer, there is a possible out of bounds read due to a missing bounds check.
- CVE-2023-21307In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissi
- CVE-2023-21306In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure.
- CVE-2023-21305In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis
- CVE-2023-21304In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa
- CVE-2023-21303In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side channel information disc
- CVE-2023-21302In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa
- CVE-2023-21301In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel
- CVE-2023-21300In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat
- CVE-2023-21299In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa
- CVE-2023-21298In Slice, there is a possible disclosure of installed applications due to side channel information disclosure.
- CVE-2023-21297In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass.
- CVE-2023-21296In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information
- CVE-2023-21295In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check.
- CVE-2023-21294In Slice, there is a possible disclosure of installed packages due to a missing permission check.
- CVE-2023-21293In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, due to side channel in
- CVE-2022-20531In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis
- CVE-2022-20264In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel info
- CVE-2021-39810In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app with
- CVE-2023-40140In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after fre
- CVE-2023-40139In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
- CVE-2023-40138In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
- CVE-2023-40137In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.
- CVE-2023-40136In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.
- CVE-2023-40135In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy.